@kavtuai/guildgate 0.1.0

package/dist/memory-store.js

@@ -0,0 +1,261 @@
+export function createMemoryStoreBundle() {
+    const sessions = new Map();
+    const states = new Map();
+    const credentials = new Map();
+    const rateBuckets = new Map();
+    const cache = new Map();
+    const idempotency = new Map();
+    const locks = new Map();
+    const audit = [];
+    const outbox = [];
+    const blocks = new Map();
+    let policyVersion = 1;
+    let maintenance = {
+        enabled: false,
+        allowOwners: true,
+        updatedAt: new Date(0).toISOString(),
+    };
+    const blockKey = (type, id) => `${type}:${id}`;
+    const credentialKey = (provider, userId) => `${provider}:${userId}`;
+    const bundle = {
+        sessions: {
+            async get(idHash) {
+                return sessions.get(idHash) ?? null;
+            },
+            async set(record) {
+                sessions.set(record.idHash, structuredClone(record));
+            },
+            async delete(idHash) {
+                sessions.delete(idHash);
+            },
+            async listByUser(userId) {
+                return [...sessions.values()]
+                    .filter((record) => record.userId === userId)
+                    .map((record) => structuredClone(record));
+            },
+        },
+        oauthStates: {
+            async put(record) {
+                states.set(record.stateHash, structuredClone(record));
+            },
+            async consume(stateHash, nowIso) {
+                const record = states.get(stateHash);
+                states.delete(stateHash);
+                if (!record || record.expiresAt <= nowIso)
+                    return null;
+                return structuredClone(record);
+            },
+        },
+        credentials: {
+            async get(provider, userId) {
+                const record = credentials.get(credentialKey(provider, userId));
+                return record ? structuredClone(record) : null;
+            },
+            async set(record) {
+                credentials.set(credentialKey(record.provider, record.userId), structuredClone(record));
+            },
+            async delete(provider, userId) {
+                credentials.delete(credentialKey(provider, userId));
+            },
+        },
+        rateLimits: {
+            async hit(input) {
+                const cost = input.cost ?? 1;
+                const current = rateBuckets.get(input.key);
+                const bucket = !current || current.resetAtMs <= input.nowMs
+                    ? { count: 0, resetAtMs: input.nowMs + input.windowMs }
+                    : current;
+                const allowed = bucket.count + cost <= input.limit;
+                if (allowed)
+                    bucket.count += cost;
+                rateBuckets.set(input.key, bucket);
+                return {
+                    allowed,
+                    limit: input.limit,
+                    remaining: Math.max(0, input.limit - bucket.count),
+                    resetAtMs: bucket.resetAtMs,
+                    retryAfterMs: allowed ? 0 : Math.max(0, bucket.resetAtMs - input.nowMs),
+                };
+            },
+            async reset(key) {
+                rateBuckets.delete(key);
+            },
+        },
+        cache: {
+            async get(key) {
+                const entry = cache.get(key);
+                if (!entry)
+                    return null;
+                if ((entry.staleUntilMs ?? entry.expiresAtMs) <= Date.now()) {
+                    cache.delete(key);
+                    return null;
+                }
+                return structuredClone(entry);
+            },
+            async set(key, entry) {
+                cache.set(key, structuredClone(entry));
+            },
+            async delete(key) {
+                cache.delete(key);
+            },
+            async deleteByTags(tags) {
+                const requested = new Set(tags);
+                let deleted = 0;
+                for (const [key, entry] of cache.entries()) {
+                    if (entry.tags.some((tag) => requested.has(tag))) {
+                        cache.delete(key);
+                        deleted += 1;
+                    }
+                }
+                return deleted;
+            },
+        },
+        idempotency: {
+            async begin(record) {
+                const current = idempotency.get(record.key);
+                if (current && current.expiresAtMs > Date.now()) {
+                    if (current.requestHash !== record.requestHash)
+                        return { status: "conflict" };
+                    if (current.state === "completed")
+                        return { status: "completed", response: structuredClone(current.response) };
+                    return { status: "inflight" };
+                }
+                idempotency.set(record.key, structuredClone(record));
+                return { status: "started" };
+            },
+            async complete(key, response, expiresAtMs) {
+                const current = idempotency.get(key);
+                if (!current)
+                    return;
+                idempotency.set(key, {
+                    ...current,
+                    state: "completed",
+                    response: structuredClone(response),
+                    expiresAtMs,
+                });
+            },
+            async fail(key) {
+                idempotency.delete(key);
+            },
+            async get(key) {
+                const current = idempotency.get(key);
+                if (!current || current.expiresAtMs <= Date.now()) {
+                    idempotency.delete(key);
+                    return null;
+                }
+                return structuredClone(current);
+            },
+        },
+        locks: {
+            async acquire(key, token, ttlMs, waitMs) {
+                const deadline = Date.now() + Math.max(0, waitMs);
+                do {
+                    const now = Date.now();
+                    const current = locks.get(key);
+                    if (!current || current.expiresAtMs <= now) {
+                        locks.set(key, { token, expiresAtMs: now + ttlMs });
+                        return true;
+                    }
+                    if (waitMs <= 0)
+                        return false;
+                    await new Promise((resolve) => setTimeout(resolve, Math.min(25, Math.max(1, deadline - now))));
+                } while (Date.now() <= deadline);
+                return false;
+            },
+            async release(key, token) {
+                const current = locks.get(key);
+                if (current?.token === token)
+                    locks.delete(key);
+            },
+        },
+        audit: {
+            async write(event) {
+                audit.push(structuredClone(event));
+            },
+            async list(filter) {
+                let rows = [...audit];
+                if (filter?.userId)
+                    rows = rows.filter((row) => row.actor.userId === filter.userId);
+                if (filter?.action)
+                    rows = rows.filter((row) => row.action === filter.action);
+                rows.reverse();
+                return rows.slice(0, filter?.limit ?? 100).map((row) => structuredClone(row));
+            },
+        },
+        outbox: {
+            async enqueue(record) {
+                outbox.push(structuredClone(record));
+            },
+            async next(limit) {
+                return outbox.filter((row) => !row.publishedAt).slice(0, limit).map((row) => structuredClone(row));
+            },
+            async markPublished(id, publishedAt) {
+                const row = outbox.find((item) => item.id === id);
+                if (row)
+                    row.publishedAt = publishedAt;
+            },
+            async markFailed(id, error) {
+                const row = outbox.find((item) => item.id === id);
+                if (row) {
+                    row.attempts += 1;
+                    row.lastError = error;
+                }
+            },
+        },
+        policies: {
+            async getMaintenance() {
+                return structuredClone(maintenance);
+            },
+            async setMaintenance(state) {
+                maintenance = structuredClone(state);
+            },
+            async getBlock(subjectType, subjectId, nowIso) {
+                const record = blocks.get(blockKey(subjectType, subjectId));
+                if (!record)
+                    return null;
+                if (record.expiresAt && record.expiresAt <= nowIso) {
+                    blocks.delete(blockKey(subjectType, subjectId));
+                    return null;
+                }
+                return structuredClone(record);
+            },
+            async putBlock(record) {
+                blocks.set(blockKey(record.subjectType, record.subjectId), structuredClone(record));
+            },
+            async removeBlock(subjectType, subjectId) {
+                blocks.delete(blockKey(subjectType, subjectId));
+            },
+            async getPolicyVersion() {
+                return policyVersion;
+            },
+            async bumpPolicyVersion() {
+                policyVersion += 1;
+                return policyVersion;
+            },
+        },
+        inspect() {
+            return {
+                sessions: [...sessions.values()].map((row) => structuredClone(row)),
+                audit: audit.map((row) => structuredClone(row)),
+                outbox: outbox.map((row) => structuredClone(row)),
+                blocks: [...blocks.values()].map((row) => structuredClone(row)),
+            };
+        },
+        clear() {
+            sessions.clear();
+            states.clear();
+            credentials.clear();
+            rateBuckets.clear();
+            cache.clear();
+            idempotency.clear();
+            locks.clear();
+            audit.length = 0;
+            outbox.length = 0;
+            blocks.clear();
+            policyVersion = 1;
+            maintenance = { enabled: false, allowOwners: true, updatedAt: new Date(0).toISOString() };
+        },
+    };
+    return bundle;
+}
+//# sourceMappingURL=memory-store.js.map

package/dist/memory-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.js","sourceRoot":"","sources":["../src/memory-store.ts"],"names":[],"mappings":"AAoCA,MAAM,UAAU,uBAAuB;IACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,WAAW,GAAqB;QAClC,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;KACrC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,IAAgC,EAAE,EAAU,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;IACnF,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC;IAEpF,MAAM,MAAM,GAAsB;QAChC,QAAQ,EAAE;YACR,KAAK,CAAC,GAAG,CAAC,MAAM;gBACd,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;YACtC,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,MAAM;gBACd,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,MAAM;gBACjB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;YACD,KAAK,CAAC,UAAU,CAAC,MAAM;gBACrB,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;qBAC1B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC;qBAC5C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9C,CAAC;SACF;QAED,WAAW,EAAE;YACX,KAAK,CAAC,GAAG,CAAC,MAAM;gBACd,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YACxD,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM;gBAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACrC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACzB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM;oBAAE,OAAO,IAAI,CAAC;gBACvD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;SACF;QAED,WAAW,EAAE;YACX,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM;gBACxB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;gBAChE,OAAO,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACjD,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,MAAM;gBACd,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1F,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM;gBAC3B,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACtD,CAAC;SACF;QAED,UAAU,EAAE;YACV,KAAK,CAAC,GAAG,CAAC,KAAwB;gBAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;gBAC7B,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3C,MAAM,MAAM,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK;oBACzD,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE;oBACvD,CAAC,CAAC,OAAO,CAAC;gBACZ,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,GAAG,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC;gBACnD,IAAI,OAAO;oBAAE,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC;gBAClC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACnC,OAAO;oBACL,OAAO;oBACP,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;oBAClD,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;iBACxE,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,GAAG;gBACb,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;SACF;QAED,KAAK,EAAE;YACL,KAAK,CAAC,GAAG,CAAI,GAAW;gBACtB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAA8B,CAAC;gBAC1D,IAAI,CAAC,KAAK;oBAAE,OAAO,IAAI,CAAC;gBACxB,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBAC5D,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAClB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,KAAK,CAAC,GAAG,CAAI,GAAW,EAAE,KAAoB;gBAC5C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YACzC,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAG;gBACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YACD,KAAK,CAAC,YAAY,CAAC,IAAI;gBACrB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,OAAO,GAAG,CAAC,CAAC;gBAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC3C,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;wBACjD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAClB,OAAO,IAAI,CAAC,CAAC;oBACf,CAAC;gBACH,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;SACF;QAED,WAAW,EAAE;YACX,KAAK,CAAC,KAAK,CAAC,MAAyB;gBACnC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC5C,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBAChD,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;wBAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;oBAC9E,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW;wBAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC/G,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;gBAChC,CAAC;gBACD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;gBACrD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW;gBACvC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACrB,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE;oBACnB,GAAG,OAAO;oBACV,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;oBACnC,WAAW;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG;gBACZ,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG;gBACX,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBAClD,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACxB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;SACF;QAED,KAAK,EAAE;YACL,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;gBACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBAClD,GAAG,CAAC;oBACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBACvB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC;wBAC3C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC;wBACpD,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,IAAI,MAAM,IAAI,CAAC;wBAAE,OAAO,KAAK,CAAC;oBAC9B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjG,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE;gBACjC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK;gBACtB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC/B,IAAI,OAAO,EAAE,KAAK,KAAK,KAAK;oBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAClD,CAAC;SACF;QAED,KAAK,EAAE;YACL,KAAK,CAAC,KAAK,CAAC,KAAK;gBACf,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,MAAM;gBACf,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;gBACtB,IAAI,MAAM,EAAE,MAAM;oBAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;gBACpF,IAAI,MAAM,EAAE,MAAM;oBAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;YAChF,CAAC;SACF;QAED,MAAM,EAAE;YACN,KAAK,CAAC,OAAO,CAAC,MAAM;gBAClB,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YACvC,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK;gBACd,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;YACrG,CAAC;YACD,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,WAAW;gBACjC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClD,IAAI,GAAG;oBAAE,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;YACzC,CAAC;YACD,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK;gBACxB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClD,IAAI,GAAG,EAAE,CAAC;oBACR,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;oBAClB,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;gBACxB,CAAC;YACH,CAAC;SACF;QAED,QAAQ,EAAE;YACR,KAAK,CAAC,cAAc;gBAClB,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC;YACtC,CAAC;YACD,KAAK,CAAC,cAAc,CAAC,KAAK;gBACxB,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM;gBAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC5D,IAAI,CAAC,MAAM;oBAAE,OAAO,IAAI,CAAC;gBACzB,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC;oBACnD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;oBAChD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;YACD,KAAK,CAAC,QAAQ,CAAC,MAAM;gBACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YACtF,CAAC;YACD,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,SAAS;gBACtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,KAAK,CAAC,gBAAgB;gBACpB,OAAO,aAAa,CAAC;YACvB,CAAC;YACD,KAAK,CAAC,iBAAiB;gBACrB,aAAa,IAAI,CAAC,CAAC;gBACnB,OAAO,aAAa,CAAC;YACvB,CAAC;SACF;QAED,OAAO;YACL,OAAO;gBACL,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;gBACnE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC/C,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;gBACjD,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;aAChE,CAAC;QACJ,CAAC;QAED,KAAK;YACH,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,KAAK,EAAE,CAAC;YACpB,WAAW,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,WAAW,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACjB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YAClB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,GAAG,CAAC,CAAC;YAClB,WAAW,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5F,CAAC;KACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/realtime/hub.d.ts

@@ -0,0 +1,42 @@
+import type { SessionManager } from "../session.js";
+import type { RateLimitStore } from "../stores.js";
+import type { RealtimeEvent, SessionRecord } from "../types.js";
+export interface RealtimeConnection {
+    id: string;
+    send(payload: string): void | Promise<void>;
+    close(code: number, reason: string): void;
+    bufferedAmount?: number;
+}
+export interface RealtimeHub {
+    attach(input: {
+        connection: RealtimeConnection;
+        origin: string | undefined;
+        sessionToken: string | undefined;
+    }): Promise<void>;
+    detach(connectionId: string): void;
+    subscribe(input: {
+        connectionId: string;
+        channel: string;
+        authorize: (session: SessionRecord, channel: string) => Promise<boolean>;
+    }): Promise<void>;
+    unsubscribe(connectionId: string, channel: string): void;
+    acceptMessage(connectionId: string, payload: string): Promise<unknown>;
+    publish(event: RealtimeEvent): Promise<void>;
+    revokeSession(sessionIdHash: string): void;
+    close(): void;
+}
+export declare function createRealtimeHub(input: {
+    sessions: SessionManager;
+    rateLimits: RateLimitStore;
+    allowedOrigins: string[];
+    heartbeatIntervalMs?: number;
+    idleTimeoutMs?: number;
+    maximumLifetimeMs?: number;
+    maximumMessageBytes?: number;
+    maximumSubscriptions?: number;
+    maximumBufferedBytes?: number;
+    messagesPerWindow?: number;
+    messageWindowMs?: number;
+    sessionValidationIntervalMs?: number;
+}): RealtimeHub;
+//# sourceMappingURL=hub.d.ts.map

package/dist/realtime/hub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub.d.ts","sourceRoot":"","sources":["../../src/realtime/hub.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEhE,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAYD,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,KAAK,EAAE;QAAE,UAAU,EAAE,kBAAkB,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/H,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,SAAS,CAAC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrJ,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACzD,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,KAAK,IAAI,IAAI,CAAC;CACf;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,QAAQ,EAAE,cAAc,CAAC;IACzB,UAAU,EAAE,cAAc,CAAC;IAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2BAA2B,CAAC,EAAE,MAAM,CAAC;CACtC,GAAG,WAAW,CA0Jd"}

package/dist/realtime/hub.js

@@ -0,0 +1,152 @@
+import { randomUUID } from "node:crypto";
+import { assertAllowedOrigin, normalizeOrigin } from "../security.js";
+export function createRealtimeHub(input) {
+    const origins = new Set(input.allowedOrigins.map(normalizeOrigin));
+    const connections = new Map();
+    const bySession = new Map();
+    const heartbeat = setInterval(() => { void checkConnections(); }, input.heartbeatIntervalMs ?? 25_000);
+    return {
+        async attach({ connection, origin, sessionToken }) {
+            removeConnection(connection.id);
+            assertAllowedOrigin(origin, origins);
+            const session = await input.sessions.validate(sessionToken);
+            if (!session || !sessionToken) {
+                connection.close(1008, "Authentication required");
+                return;
+            }
+            const record = {
+                connection,
+                session,
+                sessionToken,
+                subscriptions: new Set(),
+                lastSeenAtMs: Date.now(),
+                createdAtMs: Date.now(),
+                lastSessionValidatedAtMs: Date.now(),
+            };
+            connections.set(connection.id, record);
+            const ids = bySession.get(record.session.idHash) ?? new Set();
+            ids.add(connection.id);
+            bySession.set(record.session.idHash, ids);
+            await send(record, { type: "ready", connectionId: connection.id });
+        },
+        detach(connectionId) {
+            removeConnection(connectionId);
+        },
+        async subscribe({ connectionId, channel, authorize }) {
+            const record = requireConnection(connectionId);
+            if (record.subscriptions.size >= (input.maximumSubscriptions ?? 20)) {
+                record.connection.close(1008, "Subscription limit exceeded");
+                removeConnection(connectionId);
+                return;
+            }
+            if (!await authorize(record.session, channel)) {
+                await send(record, { type: "error", code: "SUBSCRIPTION_DENIED", channel });
+                return;
+            }
+            record.subscriptions.add(channel);
+            await send(record, { type: "subscribed", channel });
+        },
+        unsubscribe(connectionId, channel) {
+            connections.get(connectionId)?.subscriptions.delete(channel);
+        },
+        async acceptMessage(connectionId, payload) {
+            const record = requireConnection(connectionId);
+            const size = Buffer.byteLength(payload);
+            if (size > (input.maximumMessageBytes ?? 16 * 1024)) {
+                record.connection.close(1009, "Message too large");
+                removeConnection(connectionId);
+                return null;
+            }
+            const limit = await input.rateLimits.hit({
+                key: `guildgate:ws:${connectionId}`,
+                limit: input.messagesPerWindow ?? 30,
+                windowMs: input.messageWindowMs ?? 10_000,
+                nowMs: Date.now(),
+            });
+            if (!limit.allowed) {
+                record.connection.close(1008, "Message rate exceeded");
+                removeConnection(connectionId);
+                return null;
+            }
+            record.lastSeenAtMs = Date.now();
+            return JSON.parse(payload);
+        },
+        async publish(event) {
+            const payload = JSON.stringify(event);
+            const tasks = [];
+            for (const record of connections.values()) {
+                if (!record.subscriptions.has(event.channel))
+                    continue;
+                if ((record.connection.bufferedAmount ?? 0) > (input.maximumBufferedBytes ?? 512 * 1024)) {
+                    record.connection.close(1013, "Client is too slow");
+                    removeConnection(record.connection.id);
+                    continue;
+                }
+                tasks.push(send(record, payload));
+            }
+            await Promise.allSettled(tasks);
+        },
+        revokeSession(sessionIdHash) {
+            for (const connectionId of bySession.get(sessionIdHash) ?? []) {
+                const record = connections.get(connectionId);
+                record?.connection.close(1008, "Session revoked");
+                removeConnection(connectionId);
+            }
+            bySession.delete(sessionIdHash);
+        },
+        close() {
+            clearInterval(heartbeat);
+            for (const record of connections.values())
+                record.connection.close(1001, "Server shutdown");
+            connections.clear();
+            bySession.clear();
+        },
+    };
+    function removeConnection(connectionId) {
+        const record = connections.get(connectionId);
+        if (!record)
+            return;
+        connections.delete(connectionId);
+        const ids = bySession.get(record.session.idHash);
+        ids?.delete(connectionId);
+        if (ids?.size === 0)
+            bySession.delete(record.session.idHash);
+    }
+    function requireConnection(id) {
+        const record = connections.get(id);
+        if (!record)
+            throw new Error(`Unknown realtime connection: ${id}`);
+        return record;
+    }
+    async function send(record, value) {
+        const payload = typeof value === "string" ? value : JSON.stringify({ id: randomUUID(), ...value });
+        await record.connection.send(payload);
+    }
+    async function checkConnections() {
+        const now = Date.now();
+        for (const [id, record] of [...connections.entries()]) {
+            if (now - record.lastSeenAtMs > (input.idleTimeoutMs ?? 60_000)) {
+                record.connection.close(1001, "Idle timeout");
+                removeConnection(id);
+                continue;
+            }
+            if (now - record.createdAtMs > (input.maximumLifetimeMs ?? 6 * 60 * 60_000)) {
+                record.connection.close(1001, "Connection lifetime reached");
+                removeConnection(id);
+                continue;
+            }
+            if (now - record.lastSessionValidatedAtMs >= (input.sessionValidationIntervalMs ?? 60_000)) {
+                record.lastSessionValidatedAtMs = now;
+                const session = await input.sessions.validate(record.sessionToken).catch(() => null);
+                if (!session) {
+                    record.connection.close(1008, "Session expired or revoked");
+                    removeConnection(id);
+                }
+                else {
+                    record.session = session;
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=hub.js.map

package/dist/realtime/hub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub.js","sourceRoot":"","sources":["../../src/realtime/hub.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAiCtE,MAAM,UAAU,iBAAiB,CAAC,KAajC;IACC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,mBAAmB,IAAI,MAAM,CAAC,CAAC;IAEvG,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE;YAC/C,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAChC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC9B,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAuB;gBACjC,UAAU;gBACV,OAAO;gBACP,YAAY;gBACZ,aAAa,EAAE,IAAI,GAAG,EAAE;gBACxB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;gBACxB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;gBACvB,wBAAwB,EAAE,IAAI,CAAC,GAAG,EAAE;aACrC,CAAC;YACF,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YACtE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACvB,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1C,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,CAAC,YAAY;YACjB,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE;YAClD,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;gBAC7D,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YACD,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,WAAW,CAAC,YAAY,EAAE,OAAO;YAC/B,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/D,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO;YACvC,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBACpD,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;gBACnD,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBACvC,GAAG,EAAE,gBAAgB,YAAY,EAAE;gBACnC,KAAK,EAAE,KAAK,CAAC,iBAAiB,IAAI,EAAE;gBACpC,QAAQ,EAAE,KAAK,CAAC,eAAe,IAAI,MAAM;gBACzC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;aAClB,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;gBACvD,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QACxC,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,KAAK,GAAoB,EAAE,CAAC;YAClC,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACvD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,IAAI,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;oBACzF,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;oBACpD,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;oBACvC,SAAS;gBACX,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QAED,aAAa,CAAC,aAAa;YACzB,KAAK,MAAM,YAAY,IAAI,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC9D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC7C,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;gBAClD,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACjC,CAAC;YACD,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAClC,CAAC;QAED,KAAK;YACH,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE;gBAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YAC5F,WAAW,CAAC,KAAK,EAAE,CAAC;YACpB,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;IAEF,SAAS,gBAAgB,CAAC,YAAoB;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjD,GAAG,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1B,IAAI,GAAG,EAAE,IAAI,KAAK,CAAC;YAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,SAAS,iBAAiB,CAAC,EAAU;QACnC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,MAA0B,EAAE,KAAc;QAC5D,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,KAAe,EAAE,CAAC,CAAC;QAC7G,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,UAAU,gBAAgB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACtD,IAAI,GAAG,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,MAAM,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBAC9C,gBAAgB,CAAC,EAAE,CAAC,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;gBAC5E,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;gBAC7D,gBAAgB,CAAC,EAAE,CAAC,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,IAAI,GAAG,GAAG,MAAM,CAAC,wBAAwB,IAAI,CAAC,KAAK,CAAC,2BAA2B,IAAI,MAAM,CAAC,EAAE,CAAC;gBAC3F,MAAM,CAAC,wBAAwB,GAAG,GAAG,CAAC;gBACtC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBACrF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;oBAC5D,gBAAgB,CAAC,EAAE,CAAC,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/realtime/outbox.d.ts

@@ -0,0 +1,12 @@
+import type { RealtimePublisher } from "../kernel.js";
+import type { OutboxStore } from "../stores.js";
+export declare function dispatchOutbox(input: {
+    store: OutboxStore;
+    publisher: RealtimePublisher;
+    limit?: number;
+    now?: () => Date;
+}): Promise<{
+    published: number;
+    failed: number;
+}>;
+//# sourceMappingURL=outbox.d.ts.map

package/dist/realtime/outbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../../src/realtime/outbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAejD"}

package/dist/realtime/outbox.js

@@ -0,0 +1,18 @@
+export async function dispatchOutbox(input) {
+    const records = await input.store.next(input.limit ?? 100);
+    let published = 0;
+    let failed = 0;
+    for (const record of records) {
+        try {
+            await input.publisher.publish(record.event);
+            await input.store.markPublished(record.id, (input.now ?? (() => new Date()))().toISOString());
+            published += 1;
+        }
+        catch (error) {
+            await input.store.markFailed(record.id, error instanceof Error ? error.message : String(error));
+            failed += 1;
+        }
+    }
+    return { published, failed };
+}
+//# sourceMappingURL=outbox.js.map

package/dist/realtime/outbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../../src/realtime/outbox.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAKpC;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;IAC3D,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9F,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAChG,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC"}

package/dist/realtime.d.ts

@@ -0,0 +1,3 @@
+export * from "./realtime/hub.js";
+export * from "./realtime/outbox.js";
+//# sourceMappingURL=realtime.d.ts.map

package/dist/realtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../src/realtime.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC"}

package/dist/realtime.js

@@ -0,0 +1,3 @@
+export * from "./realtime/hub.js";
+export * from "./realtime/outbox.js";
+//# sourceMappingURL=realtime.js.map

package/dist/realtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.js","sourceRoot":"","sources":["../src/realtime.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC"}

package/dist/redis.d.ts

@@ -0,0 +1,49 @@
+import type { CacheStore, IdempotencyStore, LockStore, OAuthStateStore, RateLimitStore, SessionStore } from "./stores.js";
+export interface RedisCommandAdapter {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, options?: {
+        px?: number;
+        nx?: boolean;
+    }): Promise<boolean>;
+    del(...keys: string[]): Promise<number>;
+    sAdd(key: string, ...members: string[]): Promise<number>;
+    sRem(key: string, ...members: string[]): Promise<number>;
+    sMembers(key: string): Promise<string[]>;
+    pTtl(key: string): Promise<number>;
+    eval(script: string, keys: string[], args: string[]): Promise<unknown>;
+}
+export interface RedisEphemeralStores {
+    sessions: SessionStore;
+    oauthStates: OAuthStateStore;
+    rateLimits: RateLimitStore;
+    cache: CacheStore;
+    idempotency: IdempotencyStore;
+    locks: LockStore;
+}
+export declare function fromNodeRedis(client: {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, options?: Record<string, unknown>): Promise<string | null>;
+    del(keys: string | string[]): Promise<number>;
+    sAdd(key: string, members: string | string[]): Promise<number>;
+    sRem(key: string, members: string | string[]): Promise<number>;
+    sMembers(key: string): Promise<string[]>;
+    pTTL(key: string): Promise<number>;
+    eval(script: string, options: {
+        keys: string[];
+        arguments: string[];
+    }): Promise<unknown>;
+}): RedisCommandAdapter;
+export declare function fromIoRedis(client: {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, ...args: string[]): Promise<string | null>;
+    del(...keys: string[]): Promise<number>;
+    sadd(key: string, ...members: string[]): Promise<number>;
+    srem(key: string, ...members: string[]): Promise<number>;
+    smembers(key: string): Promise<string[]>;
+    pttl(key: string): Promise<number>;
+    eval(script: string, numberOfKeys: number, ...args: string[]): Promise<unknown>;
+}): RedisCommandAdapter;
+export declare function createRedisEphemeralStores(redis: RedisCommandAdapter, input?: {
+    prefix?: string;
+}): RedisEphemeralStores;
+//# sourceMappingURL=redis.d.ts.map

package/dist/redis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.d.ts","sourceRoot":"","sources":["../src/redis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,eAAe,EACf,cAAc,EACd,YAAY,EACb,MAAM,aAAa,CAAC;AAWrB,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3F,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,YAAY,CAAC;IACvB,WAAW,EAAE,eAAe,CAAC;IAC7B,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,KAAK,EAAE,SAAS,CAAC;CAClB;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE;IACpC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3F,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1F,GAAG,mBAAmB,CAiBtB;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAClC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3E,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjF,GAAG,mBAAmB,CAgBtB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,mBAAmB,EAAE,KAAK,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,oBAAoB,CA4IxH"}