@korajs/server 0.1.0

package/dist/index.cjs

@@ -0,0 +1,1201 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  ClientSession: () => ClientSession,
+  HttpServerTransport: () => HttpServerTransport,
+  KoraSyncServer: () => KoraSyncServer,
+  MemoryServerStore: () => MemoryServerStore,
+  NoAuthProvider: () => NoAuthProvider,
+  PostgresServerStore: () => PostgresServerStore,
+  SqliteServerStore: () => SqliteServerStore,
+  TokenAuthProvider: () => TokenAuthProvider,
+  WsServerTransport: () => WsServerTransport,
+  createKoraServer: () => createKoraServer,
+  createPostgresServerStore: () => createPostgresServerStore,
+  createSqliteServerStore: () => createSqliteServerStore
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/store/memory-server-store.ts
+var import_core = require("@korajs/core");
+var MemoryServerStore = class {
+  nodeId;
+  operations = [];
+  operationIndex = /* @__PURE__ */ new Map();
+  versionVector = /* @__PURE__ */ new Map();
+  closed = false;
+  constructor(nodeId) {
+    this.nodeId = nodeId ?? (0, import_core.generateUUIDv7)();
+  }
+  getVersionVector() {
+    return new Map(this.versionVector);
+  }
+  getNodeId() {
+    return this.nodeId;
+  }
+  async applyRemoteOperation(op) {
+    this.assertOpen();
+    if (this.operationIndex.has(op.id)) {
+      return "duplicate";
+    }
+    this.operations.push(op);
+    this.operationIndex.set(op.id, op);
+    const currentSeq = this.versionVector.get(op.nodeId) ?? 0;
+    if (op.sequenceNumber > currentSeq) {
+      this.versionVector.set(op.nodeId, op.sequenceNumber);
+    }
+    return "applied";
+  }
+  async getOperationRange(nodeId, fromSeq, toSeq) {
+    this.assertOpen();
+    return this.operations.filter(
+      (op) => op.nodeId === nodeId && op.sequenceNumber >= fromSeq && op.sequenceNumber <= toSeq
+    ).sort((a, b) => a.sequenceNumber - b.sequenceNumber);
+  }
+  async getOperationCount() {
+    this.assertOpen();
+    return this.operations.length;
+  }
+  async close() {
+    this.closed = true;
+  }
+  // --- Testing helpers (not on interface) ---
+  /**
+   * Get all stored operations (for test assertions).
+   */
+  getAllOperations() {
+    return [...this.operations];
+  }
+  assertOpen() {
+    if (this.closed) {
+      throw new Error("MemoryServerStore is closed");
+    }
+  }
+};
+
+// src/store/postgres-server-store.ts
+var import_core2 = require("@korajs/core");
+var import_drizzle_orm = require("drizzle-orm");
+
+// src/store/drizzle-pg-schema.ts
+var import_pg_core = require("drizzle-orm/pg-core");
+var pgOperations = (0, import_pg_core.pgTable)(
+  "operations",
+  {
+    id: (0, import_pg_core.text)("id").primaryKey(),
+    nodeId: (0, import_pg_core.text)("node_id").notNull(),
+    type: (0, import_pg_core.text)("type").notNull(),
+    collection: (0, import_pg_core.text)("collection").notNull(),
+    recordId: (0, import_pg_core.text)("record_id").notNull(),
+    data: (0, import_pg_core.text)("data"),
+    // JSON-serialized, null for deletes
+    previousData: (0, import_pg_core.text)("previous_data"),
+    // JSON-serialized, null for insert/delete
+    wallTime: (0, import_pg_core.integer)("wall_time").notNull(),
+    logical: (0, import_pg_core.integer)("logical").notNull(),
+    timestampNodeId: (0, import_pg_core.text)("timestamp_node_id").notNull(),
+    sequenceNumber: (0, import_pg_core.integer)("sequence_number").notNull(),
+    causalDeps: (0, import_pg_core.text)("causal_deps").notNull().default("[]"),
+    // JSON array of op IDs
+    schemaVersion: (0, import_pg_core.integer)("schema_version").notNull(),
+    receivedAt: (0, import_pg_core.integer)("received_at").notNull()
+  },
+  (table) => ({
+    nodeSeqIdx: (0, import_pg_core.index)("idx_pg_node_seq").on(table.nodeId, table.sequenceNumber),
+    collectionIdx: (0, import_pg_core.index)("idx_pg_collection").on(table.collection),
+    receivedIdx: (0, import_pg_core.index)("idx_pg_received").on(table.receivedAt)
+  })
+);
+var pgSyncState = (0, import_pg_core.pgTable)("sync_state", {
+  nodeId: (0, import_pg_core.text)("node_id").primaryKey(),
+  maxSequenceNumber: (0, import_pg_core.integer)("max_sequence_number").notNull(),
+  lastSeenAt: (0, import_pg_core.integer)("last_seen_at").notNull()
+});
+
+// src/store/postgres-server-store.ts
+var PostgresServerStore = class {
+  nodeId;
+  db;
+  versionVector = /* @__PURE__ */ new Map();
+  ready;
+  closed = false;
+  constructor(db, nodeId) {
+    this.db = db;
+    this.nodeId = nodeId ?? (0, import_core2.generateUUIDv7)();
+    this.ready = this.initialize();
+  }
+  getVersionVector() {
+    this.assertOpen();
+    return new Map(this.versionVector);
+  }
+  getNodeId() {
+    return this.nodeId;
+  }
+  async applyRemoteOperation(op) {
+    this.assertOpen();
+    await this.ready;
+    const existing = await this.db.select({ id: pgOperations.id }).from(pgOperations).where((0, import_drizzle_orm.eq)(pgOperations.id, op.id)).limit(1);
+    if (existing.length > 0) {
+      return "duplicate";
+    }
+    const now = Date.now();
+    const row = this.serializeOperation(op, now);
+    await this.db.transaction(async (tx) => {
+      await tx.insert(pgOperations).values(row).onConflictDoNothing({ target: pgOperations.id });
+      await tx.insert(pgSyncState).values({
+        nodeId: op.nodeId,
+        maxSequenceNumber: op.sequenceNumber,
+        lastSeenAt: now
+      }).onConflictDoUpdate({
+        target: pgSyncState.nodeId,
+        set: {
+          maxSequenceNumber: import_drizzle_orm.sql`GREATEST(${pgSyncState.maxSequenceNumber}, ${op.sequenceNumber})`,
+          lastSeenAt: import_drizzle_orm.sql`${now}`
+        }
+      });
+    });
+    const currentMax = this.versionVector.get(op.nodeId) ?? 0;
+    if (op.sequenceNumber > currentMax) {
+      this.versionVector.set(op.nodeId, op.sequenceNumber);
+    }
+    return "applied";
+  }
+  async getOperationRange(nodeId, fromSeq, toSeq) {
+    this.assertOpen();
+    await this.ready;
+    const rows = await this.db.select().from(pgOperations).where(
+      (0, import_drizzle_orm.and)(
+        (0, import_drizzle_orm.eq)(pgOperations.nodeId, nodeId),
+        (0, import_drizzle_orm.between)(pgOperations.sequenceNumber, fromSeq, toSeq)
+      )
+    ).orderBy((0, import_drizzle_orm.asc)(pgOperations.sequenceNumber));
+    return rows.map((row) => this.deserializeOperation(row));
+  }
+  async getOperationCount() {
+    this.assertOpen();
+    await this.ready;
+    const result = await this.db.select({ value: (0, import_drizzle_orm.count)() }).from(pgOperations);
+    return result[0]?.value ?? 0;
+  }
+  async close() {
+    this.closed = true;
+  }
+  async initialize() {
+    await this.ensureTables();
+    const rows = await this.db.select({
+      nodeId: pgSyncState.nodeId,
+      maxSequenceNumber: pgSyncState.maxSequenceNumber
+    }).from(pgSyncState);
+    for (const row of rows) {
+      this.versionVector.set(row.nodeId, row.maxSequenceNumber);
+    }
+  }
+  /**
+   * Create tables if they don't exist.
+   * Uses raw SQL via Drizzle's sql template — standard DDL practice without drizzle-kit.
+   */
+  async ensureTables() {
+    await this.db.execute(import_drizzle_orm.sql`
+			CREATE TABLE IF NOT EXISTS operations (
+				id TEXT PRIMARY KEY,
+				node_id TEXT NOT NULL,
+				type TEXT NOT NULL,
+				collection TEXT NOT NULL,
+				record_id TEXT NOT NULL,
+				data TEXT,
+				previous_data TEXT,
+				wall_time INTEGER NOT NULL,
+				logical INTEGER NOT NULL,
+				timestamp_node_id TEXT NOT NULL,
+				sequence_number INTEGER NOT NULL,
+				causal_deps TEXT NOT NULL DEFAULT '[]',
+				schema_version INTEGER NOT NULL,
+				received_at INTEGER NOT NULL
+			)
+		`);
+    await this.db.execute(
+      import_drizzle_orm.sql`CREATE INDEX IF NOT EXISTS idx_node_seq ON operations (node_id, sequence_number)`
+    );
+    await this.db.execute(
+      import_drizzle_orm.sql`CREATE INDEX IF NOT EXISTS idx_collection ON operations (collection)`
+    );
+    await this.db.execute(
+      import_drizzle_orm.sql`CREATE INDEX IF NOT EXISTS idx_received ON operations (received_at)`
+    );
+    await this.db.execute(import_drizzle_orm.sql`
+			CREATE TABLE IF NOT EXISTS sync_state (
+				node_id TEXT PRIMARY KEY,
+				max_sequence_number INTEGER NOT NULL,
+				last_seen_at INTEGER NOT NULL
+			)
+		`);
+  }
+  serializeOperation(op, receivedAt) {
+    return {
+      id: op.id,
+      nodeId: op.nodeId,
+      type: op.type,
+      collection: op.collection,
+      recordId: op.recordId,
+      data: op.data !== null ? JSON.stringify(op.data) : null,
+      previousData: op.previousData !== null ? JSON.stringify(op.previousData) : null,
+      wallTime: op.timestamp.wallTime,
+      logical: op.timestamp.logical,
+      timestampNodeId: op.timestamp.nodeId,
+      sequenceNumber: op.sequenceNumber,
+      causalDeps: JSON.stringify(op.causalDeps),
+      schemaVersion: op.schemaVersion,
+      receivedAt
+    };
+  }
+  deserializeOperation(row) {
+    return {
+      id: row.id,
+      nodeId: row.nodeId,
+      type: row.type,
+      collection: row.collection,
+      recordId: row.recordId,
+      data: row.data !== null ? JSON.parse(row.data) : null,
+      previousData: row.previousData !== null ? JSON.parse(row.previousData) : null,
+      timestamp: {
+        wallTime: row.wallTime,
+        logical: row.logical,
+        nodeId: row.timestampNodeId
+      },
+      sequenceNumber: row.sequenceNumber,
+      causalDeps: JSON.parse(row.causalDeps),
+      schemaVersion: row.schemaVersion
+    };
+  }
+  assertOpen() {
+    if (this.closed) {
+      throw new Error("PostgresServerStore is closed");
+    }
+  }
+};
+async function createPostgresServerStore(options) {
+  const { postgresClient, drizzleFn } = await loadPostgresDeps();
+  const client = postgresClient(options.connectionString);
+  const db = drizzleFn(client);
+  return new PostgresServerStore(db, options.nodeId);
+}
+async function loadPostgresDeps() {
+  try {
+    const dynamicImport = new Function("specifier", "return import(specifier)");
+    const postgresMod = await dynamicImport("postgres");
+    const drizzleMod = await dynamicImport("drizzle-orm/postgres-js");
+    return {
+      postgresClient: postgresMod.default,
+      drizzleFn: drizzleMod.drizzle
+    };
+  } catch {
+    throw new Error(
+      'PostgreSQL backend requires the "postgres" package. Install it in your project dependencies.'
+    );
+  }
+}
+
+// src/store/sqlite-server-store.ts
+var import_core3 = require("@korajs/core");
+var import_drizzle_orm2 = require("drizzle-orm");
+
+// src/store/drizzle-schema.ts
+var import_sqlite_core = require("drizzle-orm/sqlite-core");
+var operations = (0, import_sqlite_core.sqliteTable)(
+  "operations",
+  {
+    id: (0, import_sqlite_core.text)("id").primaryKey(),
+    nodeId: (0, import_sqlite_core.text)("node_id").notNull(),
+    type: (0, import_sqlite_core.text)("type").notNull(),
+    collection: (0, import_sqlite_core.text)("collection").notNull(),
+    recordId: (0, import_sqlite_core.text)("record_id").notNull(),
+    data: (0, import_sqlite_core.text)("data"),
+    // JSON-serialized, null for deletes
+    previousData: (0, import_sqlite_core.text)("previous_data"),
+    // JSON-serialized, null for insert/delete
+    wallTime: (0, import_sqlite_core.integer)("wall_time").notNull(),
+    logical: (0, import_sqlite_core.integer)("logical").notNull(),
+    timestampNodeId: (0, import_sqlite_core.text)("timestamp_node_id").notNull(),
+    sequenceNumber: (0, import_sqlite_core.integer)("sequence_number").notNull(),
+    causalDeps: (0, import_sqlite_core.text)("causal_deps").notNull().default("[]"),
+    // JSON array of op IDs
+    schemaVersion: (0, import_sqlite_core.integer)("schema_version").notNull(),
+    receivedAt: (0, import_sqlite_core.integer)("received_at").notNull()
+  },
+  (table) => ({
+    nodeSeqIdx: (0, import_sqlite_core.index)("idx_node_seq").on(table.nodeId, table.sequenceNumber),
+    collectionIdx: (0, import_sqlite_core.index)("idx_collection").on(table.collection),
+    receivedIdx: (0, import_sqlite_core.index)("idx_received").on(table.receivedAt)
+  })
+);
+var syncState = (0, import_sqlite_core.sqliteTable)("sync_state", {
+  nodeId: (0, import_sqlite_core.text)("node_id").primaryKey(),
+  maxSequenceNumber: (0, import_sqlite_core.integer)("max_sequence_number").notNull(),
+  lastSeenAt: (0, import_sqlite_core.integer)("last_seen_at").notNull()
+});
+
+// src/store/sqlite-server-store.ts
+var SqliteServerStore = class {
+  nodeId;
+  db;
+  closed = false;
+  constructor(db, nodeId) {
+    this.db = db;
+    this.nodeId = nodeId ?? (0, import_core3.generateUUIDv7)();
+    this.ensureTables();
+  }
+  getVersionVector() {
+    this.assertOpen();
+    const rows = this.db.select().from(syncState).all();
+    const vv = /* @__PURE__ */ new Map();
+    for (const row of rows) {
+      vv.set(row.nodeId, row.maxSequenceNumber);
+    }
+    return vv;
+  }
+  getNodeId() {
+    return this.nodeId;
+  }
+  async applyRemoteOperation(op) {
+    this.assertOpen();
+    const now = Date.now();
+    const row = this.serializeOperation(op, now);
+    const result = this.db.transaction((tx) => {
+      const insertResult = tx.insert(operations).values(row).onConflictDoNothing({ target: operations.id }).run();
+      if (insertResult.changes === 0) {
+        return "duplicate";
+      }
+      tx.insert(syncState).values({
+        nodeId: op.nodeId,
+        maxSequenceNumber: op.sequenceNumber,
+        lastSeenAt: now
+      }).onConflictDoUpdate({
+        target: syncState.nodeId,
+        set: {
+          maxSequenceNumber: import_drizzle_orm2.sql`MAX(${syncState.maxSequenceNumber}, ${op.sequenceNumber})`,
+          lastSeenAt: import_drizzle_orm2.sql`${now}`
+        }
+      }).run();
+      return "applied";
+    });
+    return result;
+  }
+  async getOperationRange(nodeId, fromSeq, toSeq) {
+    this.assertOpen();
+    const rows = this.db.select().from(operations).where((0, import_drizzle_orm2.and)((0, import_drizzle_orm2.eq)(operations.nodeId, nodeId), (0, import_drizzle_orm2.between)(operations.sequenceNumber, fromSeq, toSeq))).orderBy((0, import_drizzle_orm2.asc)(operations.sequenceNumber)).all();
+    return rows.map((row) => this.deserializeOperation(row));
+  }
+  async getOperationCount() {
+    this.assertOpen();
+    const result = this.db.select({ value: (0, import_drizzle_orm2.count)() }).from(operations).all();
+    return result[0]?.value ?? 0;
+  }
+  async close() {
+    this.closed = true;
+  }
+  /**
+   * Create the operations and sync_state tables if they don't exist.
+   * Uses raw SQL via Drizzle's sql template — standard practice for DDL without drizzle-kit.
+   */
+  ensureTables() {
+    this.db.run(import_drizzle_orm2.sql`
+			CREATE TABLE IF NOT EXISTS operations (
+				id TEXT PRIMARY KEY,
+				node_id TEXT NOT NULL,
+				type TEXT NOT NULL,
+				collection TEXT NOT NULL,
+				record_id TEXT NOT NULL,
+				data TEXT,
+				previous_data TEXT,
+				wall_time INTEGER NOT NULL,
+				logical INTEGER NOT NULL,
+				timestamp_node_id TEXT NOT NULL,
+				sequence_number INTEGER NOT NULL,
+				causal_deps TEXT NOT NULL DEFAULT '[]',
+				schema_version INTEGER NOT NULL,
+				received_at INTEGER NOT NULL
+			)
+		`);
+    this.db.run(import_drizzle_orm2.sql`
+			CREATE INDEX IF NOT EXISTS idx_node_seq ON operations (node_id, sequence_number)
+		`);
+    this.db.run(import_drizzle_orm2.sql`
+			CREATE INDEX IF NOT EXISTS idx_collection ON operations (collection)
+		`);
+    this.db.run(import_drizzle_orm2.sql`
+			CREATE INDEX IF NOT EXISTS idx_received ON operations (received_at)
+		`);
+    this.db.run(import_drizzle_orm2.sql`
+			CREATE TABLE IF NOT EXISTS sync_state (
+				node_id TEXT PRIMARY KEY,
+				max_sequence_number INTEGER NOT NULL,
+				last_seen_at INTEGER NOT NULL
+			)
+		`);
+  }
+  serializeOperation(op, receivedAt) {
+    return {
+      id: op.id,
+      nodeId: op.nodeId,
+      type: op.type,
+      collection: op.collection,
+      recordId: op.recordId,
+      data: op.data !== null ? JSON.stringify(op.data) : null,
+      previousData: op.previousData !== null ? JSON.stringify(op.previousData) : null,
+      wallTime: op.timestamp.wallTime,
+      logical: op.timestamp.logical,
+      timestampNodeId: op.timestamp.nodeId,
+      sequenceNumber: op.sequenceNumber,
+      causalDeps: JSON.stringify(op.causalDeps),
+      schemaVersion: op.schemaVersion,
+      receivedAt
+    };
+  }
+  deserializeOperation(row) {
+    return {
+      id: row.id,
+      nodeId: row.nodeId,
+      type: row.type,
+      collection: row.collection,
+      recordId: row.recordId,
+      data: row.data !== null ? JSON.parse(row.data) : null,
+      previousData: row.previousData !== null ? JSON.parse(row.previousData) : null,
+      timestamp: {
+        wallTime: row.wallTime,
+        logical: row.logical,
+        nodeId: row.timestampNodeId
+      },
+      sequenceNumber: row.sequenceNumber,
+      causalDeps: JSON.parse(row.causalDeps),
+      schemaVersion: row.schemaVersion
+    };
+  }
+  assertOpen() {
+    if (this.closed) {
+      throw new Error("SqliteServerStore is closed");
+    }
+  }
+};
+function createSqliteServerStore(options) {
+  const Database = require("better-sqlite3");
+  const { drizzle } = require("drizzle-orm/better-sqlite3");
+  const filename = options.filename ?? ":memory:";
+  const sqlite = new Database(filename);
+  sqlite.pragma("journal_mode = WAL");
+  const db = drizzle(sqlite);
+  return new SqliteServerStore(db, options.nodeId);
+}
+
+// src/transport/http-server-transport.ts
+var import_core4 = require("@korajs/core");
+var HttpServerTransport = class {
+  serializer;
+  messageHandler = null;
+  closeHandler = null;
+  errorHandler = null;
+  connected = true;
+  nextSequence = 1;
+  queue = [];
+  constructor(serializer) {
+    this.serializer = serializer;
+  }
+  send(message) {
+    if (!this.connected) return;
+    const encoded = this.serializer.encode(message);
+    const isBinary = encoded instanceof Uint8Array;
+    this.queue.push({
+      etag: this.makeEtag(this.nextSequence++),
+      contentType: isBinary ? "application/x-protobuf" : "application/json",
+      payload: encoded
+    });
+  }
+  onMessage(handler) {
+    this.messageHandler = handler;
+  }
+  onClose(handler) {
+    this.closeHandler = handler;
+  }
+  onError(handler) {
+    this.errorHandler = handler;
+  }
+  isConnected() {
+    return this.connected;
+  }
+  close(code = 1e3, reason = "transport closed") {
+    if (!this.connected) return;
+    this.connected = false;
+    this.queue.length = 0;
+    this.closeHandler?.(code, reason);
+  }
+  receive(payload) {
+    if (!this.connected) {
+      throw new import_core4.SyncError("HTTP server transport is closed");
+    }
+    try {
+      const message = this.serializer.decode(payload);
+      this.messageHandler?.(message);
+    } catch (error) {
+      this.errorHandler?.(error instanceof Error ? error : new Error(String(error)));
+    }
+  }
+  poll(ifNoneMatch) {
+    if (!this.connected) {
+      return { status: 410 };
+    }
+    const next = this.queue[0];
+    if (!next) {
+      return { status: 204 };
+    }
+    if (ifNoneMatch && ifNoneMatch === next.etag) {
+      return {
+        status: 304,
+        headers: { etag: next.etag }
+      };
+    }
+    this.queue.shift();
+    return {
+      status: 200,
+      body: next.payload,
+      headers: {
+        "content-type": next.contentType,
+        etag: next.etag
+      }
+    };
+  }
+  makeEtag(sequence) {
+    return `W/"${sequence}"`;
+  }
+};
+
+// src/transport/ws-server-transport.ts
+var import_core5 = require("@korajs/core");
+var import_sync = require("@korajs/sync");
+var WS_OPEN = 1;
+var WsServerTransport = class {
+  ws;
+  serializer;
+  messageHandler = null;
+  closeHandler = null;
+  errorHandler = null;
+  constructor(ws, options) {
+    this.ws = ws;
+    this.serializer = options?.serializer ?? new import_sync.JsonMessageSerializer();
+    this.setupListeners();
+  }
+  send(message) {
+    if (this.ws.readyState !== WS_OPEN) {
+      throw new import_core5.SyncError("Cannot send message: WebSocket is not open", {
+        readyState: this.ws.readyState,
+        messageType: message.type
+      });
+    }
+    const encoded = this.serializer.encode(message);
+    this.ws.send(encoded);
+  }
+  onMessage(handler) {
+    this.messageHandler = handler;
+  }
+  onClose(handler) {
+    this.closeHandler = handler;
+  }
+  onError(handler) {
+    this.errorHandler = handler;
+  }
+  isConnected() {
+    return this.ws.readyState === WS_OPEN;
+  }
+  close(code, reason) {
+    this.ws.close(code ?? 1e3, reason ?? "server closing");
+  }
+  setupListeners() {
+    this.ws.on("message", (data) => {
+      try {
+        if (typeof data !== "string" && !(data instanceof Uint8Array) && !(data instanceof ArrayBuffer)) {
+          throw new import_core5.SyncError("Unsupported WebSocket payload type", {
+            payloadType: typeof data
+          });
+        }
+        const decoded = this.serializer.decode(data);
+        this.messageHandler?.(decoded);
+      } catch (err) {
+        this.errorHandler?.(err instanceof Error ? err : new Error(String(err)));
+      }
+    });
+    this.ws.on("close", (code, reason) => {
+      this.closeHandler?.(Number(code) || 1006, String(reason || "connection closed"));
+    });
+    this.ws.on("error", (err) => {
+      this.errorHandler?.(err instanceof Error ? err : new Error(String(err)));
+    });
+  }
+};
+
+// src/session/client-session.ts
+var import_core6 = require("@korajs/core");
+var import_internal = require("@korajs/core/internal");
+var import_sync2 = require("@korajs/sync");
+
+// src/scopes/server-scope-filter.ts
+function operationMatchesScopes(op, scopes) {
+  if (!scopes) return true;
+  const collectionScope = scopes[op.collection];
+  if (!collectionScope) return false;
+  const snapshot = buildSnapshot(op);
+  if (!snapshot) return false;
+  for (const [field, expected] of Object.entries(collectionScope)) {
+    if (snapshot[field] !== expected) {
+      return false;
+    }
+  }
+  return true;
+}
+function buildSnapshot(op) {
+  const previous = asRecord(op.previousData);
+  const next = asRecord(op.data);
+  if (!previous && !next) return null;
+  return {
+    ...previous ?? {},
+    ...next ?? {}
+  };
+}
+function asRecord(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return null;
+  }
+  return value;
+}
+
+// src/session/client-session.ts
+var DEFAULT_BATCH_SIZE = 100;
+var DEFAULT_SCHEMA_VERSION = 1;
+var ClientSession = class {
+  state = "connected";
+  clientNodeId = null;
+  authContext = null;
+  sessionId;
+  transport;
+  store;
+  auth;
+  serializer;
+  emitter;
+  batchSize;
+  schemaVersion;
+  onRelay;
+  onClose;
+  constructor(options) {
+    this.sessionId = options.sessionId;
+    this.transport = options.transport;
+    this.store = options.store;
+    this.auth = options.auth ?? null;
+    this.serializer = options.serializer ?? new import_sync2.NegotiatedMessageSerializer("json");
+    this.emitter = options.emitter ?? null;
+    this.batchSize = options.batchSize ?? DEFAULT_BATCH_SIZE;
+    this.schemaVersion = options.schemaVersion ?? DEFAULT_SCHEMA_VERSION;
+    this.onRelay = options.onRelay ?? null;
+    this.onClose = options.onClose ?? null;
+  }
+  /**
+   * Start handling messages from the client transport.
+   */
+  start() {
+    this.transport.onMessage((msg) => this.handleMessage(msg));
+    this.transport.onClose((_code, _reason) => this.handleTransportClose());
+    this.transport.onError((_err) => {
+      if (this.state !== "closed") {
+        this.handleTransportClose();
+      }
+    });
+  }
+  /**
+   * Relay operations from another session to this client.
+   * Only relays if the session is in streaming state and transport is connected.
+   */
+  relayOperations(operations2) {
+    if (this.state !== "streaming" || !this.transport.isConnected()) return;
+    if (operations2.length === 0) return;
+    const visibleOperations = operations2.filter(
+      (op) => operationMatchesScopes(op, this.authContext?.scopes)
+    );
+    if (visibleOperations.length === 0) return;
+    const serializedOps = visibleOperations.map((op) => this.serializer.encodeOperation(op));
+    const msg = {
+      type: "operation-batch",
+      messageId: (0, import_core6.generateUUIDv7)(),
+      operations: serializedOps,
+      isFinal: true,
+      batchIndex: 0
+    };
+    this.transport.send(msg);
+  }
+  /**
+   * Close this session.
+   */
+  close(reason) {
+    if (this.state === "closed") return;
+    this.state = "closed";
+    if (this.transport.isConnected()) {
+      this.transport.close(1e3, reason ?? "session closed");
+    }
+    this.onClose?.(this.sessionId);
+  }
+  // --- Getters ---
+  getState() {
+    return this.state;
+  }
+  getSessionId() {
+    return this.sessionId;
+  }
+  getClientNodeId() {
+    return this.clientNodeId;
+  }
+  getAuthContext() {
+    return this.authContext;
+  }
+  isStreaming() {
+    return this.state === "streaming";
+  }
+  // --- Private protocol handlers ---
+  handleMessage(message) {
+    switch (message.type) {
+      case "handshake":
+        this.handleHandshake(message);
+        break;
+      case "operation-batch":
+        this.handleOperationBatch(message);
+        break;
+      // Acknowledgments from clients are noted but no action needed on server
+      case "acknowledgment":
+        break;
+      case "error":
+        break;
+    }
+  }
+  async handleHandshake(msg) {
+    if (this.state !== "connected") {
+      this.sendError("DUPLICATE_HANDSHAKE", "Handshake already completed", false);
+      return;
+    }
+    this.clientNodeId = msg.nodeId;
+    if (this.auth) {
+      const token = msg.authToken ?? "";
+      const context = await this.auth.authenticate(token);
+      if (!context) {
+        this.sendError("AUTH_FAILED", "Authentication failed", false);
+        this.close("authentication failed");
+        return;
+      }
+      this.authContext = context;
+      this.state = "authenticated";
+    }
+    const serverVector = this.store.getVersionVector();
+    const selectedWireFormat = selectWireFormat(msg.supportedWireFormats);
+    this.setSerializerWireFormat(selectedWireFormat);
+    const response = {
+      type: "handshake-response",
+      messageId: (0, import_core6.generateUUIDv7)(),
+      nodeId: this.store.getNodeId(),
+      versionVector: (0, import_sync2.versionVectorToWire)(serverVector),
+      schemaVersion: this.schemaVersion,
+      accepted: true,
+      selectedWireFormat
+    };
+    this.transport.send(response);
+    this.emitter?.emit({ type: "sync:connected", nodeId: msg.nodeId });
+    this.state = "syncing";
+    const clientVector = (0, import_sync2.wireToVersionVector)(msg.versionVector);
+    await this.sendDelta(clientVector);
+    this.state = "streaming";
+  }
+  async handleOperationBatch(msg) {
+    const operations2 = msg.operations.map((s) => this.serializer.decodeOperation(s));
+    const applied = [];
+    for (const op of operations2) {
+      if (!operationMatchesScopes(op, this.authContext?.scopes)) {
+        continue;
+      }
+      const result = await this.store.applyRemoteOperation(op);
+      if (result === "applied") {
+        applied.push(op);
+      }
+    }
+    if (operations2.length > 0) {
+      this.emitter?.emit({
+        type: "sync:received",
+        operations: operations2,
+        batchSize: operations2.length
+      });
+    }
+    const lastOp = operations2[operations2.length - 1];
+    const ack = {
+      type: "acknowledgment",
+      messageId: (0, import_core6.generateUUIDv7)(),
+      acknowledgedMessageId: msg.messageId,
+      lastSequenceNumber: lastOp ? lastOp.sequenceNumber : 0
+    };
+    this.transport.send(ack);
+    if (applied.length > 0) {
+      this.onRelay?.(this.sessionId, applied);
+    }
+  }
+  async sendDelta(clientVector) {
+    const serverVector = this.store.getVersionVector();
+    const missing = [];
+    for (const [nodeId, serverSeq] of serverVector) {
+      const clientSeq = clientVector.get(nodeId) ?? 0;
+      if (serverSeq > clientSeq) {
+        const ops = await this.store.getOperationRange(nodeId, clientSeq + 1, serverSeq);
+        const visible = ops.filter((op) => operationMatchesScopes(op, this.authContext?.scopes));
+        missing.push(...visible);
+      }
+    }
+    if (missing.length === 0) {
+      const emptyBatch = {
+        type: "operation-batch",
+        messageId: (0, import_core6.generateUUIDv7)(),
+        operations: [],
+        isFinal: true,
+        batchIndex: 0
+      };
+      this.transport.send(emptyBatch);
+      return;
+    }
+    const sorted = (0, import_internal.topologicalSort)(missing);
+    const totalBatches = Math.ceil(sorted.length / this.batchSize);
+    for (let i = 0; i < totalBatches; i++) {
+      const start = i * this.batchSize;
+      const batchOps = sorted.slice(start, start + this.batchSize);
+      const serializedOps = batchOps.map((op) => this.serializer.encodeOperation(op));
+      const batchMsg = {
+        type: "operation-batch",
+        messageId: (0, import_core6.generateUUIDv7)(),
+        operations: serializedOps,
+        isFinal: i === totalBatches - 1,
+        batchIndex: i
+      };
+      this.transport.send(batchMsg);
+      this.emitter?.emit({
+        type: "sync:sent",
+        operations: batchOps,
+        batchSize: batchOps.length
+      });
+    }
+  }
+  sendError(code, message, retriable) {
+    const errorMsg = {
+      type: "error",
+      messageId: (0, import_core6.generateUUIDv7)(),
+      code,
+      message,
+      retriable
+    };
+    this.transport.send(errorMsg);
+  }
+  setSerializerWireFormat(format) {
+    if (typeof this.serializer.setWireFormat === "function") {
+      this.serializer.setWireFormat(format);
+    }
+  }
+  handleTransportClose() {
+    if (this.state === "closed") return;
+    this.state = "closed";
+    this.emitter?.emit({ type: "sync:disconnected", reason: "transport closed" });
+    this.onClose?.(this.sessionId);
+  }
+};
+function selectWireFormat(supportedWireFormats) {
+  if (supportedWireFormats?.includes("protobuf")) {
+    return "protobuf";
+  }
+  return "json";
+}
+
+// src/server/kora-sync-server.ts
+var import_core7 = require("@korajs/core");
+var import_sync3 = require("@korajs/sync");
+var DEFAULT_MAX_CONNECTIONS = 0;
+var DEFAULT_BATCH_SIZE2 = 100;
+var DEFAULT_SCHEMA_VERSION2 = 1;
+var DEFAULT_HOST = "0.0.0.0";
+var DEFAULT_PATH = "/";
+var KoraSyncServer = class {
+  store;
+  auth;
+  serializer;
+  emitter;
+  maxConnections;
+  batchSize;
+  schemaVersion;
+  port;
+  host;
+  path;
+  sessions = /* @__PURE__ */ new Map();
+  httpClients = /* @__PURE__ */ new Map();
+  httpSessionToClient = /* @__PURE__ */ new Map();
+  wsServer = null;
+  running = false;
+  constructor(config) {
+    this.store = config.store;
+    this.auth = config.auth ?? null;
+    this.serializer = config.serializer ?? new import_sync3.JsonMessageSerializer();
+    this.emitter = config.emitter ?? null;
+    this.maxConnections = config.maxConnections ?? DEFAULT_MAX_CONNECTIONS;
+    this.batchSize = config.batchSize ?? DEFAULT_BATCH_SIZE2;
+    this.schemaVersion = config.schemaVersion ?? DEFAULT_SCHEMA_VERSION2;
+    this.port = config.port;
+    this.host = config.host ?? DEFAULT_HOST;
+    this.path = config.path ?? DEFAULT_PATH;
+  }
+  /**
+   * Start the WebSocket server in standalone mode.
+   *
+   * @param wsServerImpl - Optional WebSocket server constructor for testing
+   */
+  async start(wsServerImpl) {
+    if (this.running) {
+      throw new import_core7.SyncError("Server is already running", { port: this.port });
+    }
+    if (!wsServerImpl && this.port === void 0) {
+      throw new import_core7.SyncError(
+        "Port is required for standalone mode. Provide port in config or use handleConnection() for attach mode.",
+        {}
+      );
+    }
+    if (wsServerImpl) {
+      this.wsServer = new wsServerImpl({
+        port: this.port,
+        host: this.host,
+        path: this.path
+      });
+    } else {
+      const { WebSocketServer } = await import("ws");
+      this.wsServer = new WebSocketServer({
+        port: this.port,
+        host: this.host,
+        path: this.path
+      });
+    }
+    this.wsServer.on("connection", (ws) => {
+      const transport = new WsServerTransport(
+        ws,
+        {
+          serializer: this.serializer
+        }
+      );
+      this.handleConnection(transport);
+    });
+    this.running = true;
+  }
+  /**
+   * Stop the server. Closes all sessions and the WebSocket server.
+   */
+  async stop() {
+    for (const session of this.sessions.values()) {
+      session.close("server shutting down");
+    }
+    this.sessions.clear();
+    this.httpClients.clear();
+    this.httpSessionToClient.clear();
+    if (this.wsServer) {
+      await new Promise((resolve) => {
+        this.wsServer?.close(() => resolve());
+      });
+      this.wsServer = null;
+    }
+    this.running = false;
+  }
+  /**
+   * Handle one HTTP sync request for a long-polling client.
+   *
+   * A stable `clientId` identifies the logical connection across requests.
+   */
+  async handleHttpRequest(request) {
+    if (!request.clientId || request.clientId.trim().length === 0) {
+      return { status: 400 };
+    }
+    const client = this.getOrCreateHttpClient(request.clientId);
+    if (request.method === "POST") {
+      if (request.body === void 0) {
+        return { status: 400 };
+      }
+      const payload = normalizeHttpBody(request.body, request.contentType);
+      client.transport.receive(payload);
+      return { status: 202 };
+    }
+    if (request.method === "GET") {
+      const polled = client.transport.poll(request.ifNoneMatch);
+      return {
+        status: polled.status,
+        body: polled.body,
+        headers: polled.headers
+      };
+    }
+    return {
+      status: 405,
+      headers: { allow: "GET, POST" }
+    };
+  }
+  /**
+   * Handle an incoming client connection (attach mode).
+   * Creates a new ClientSession for the transport.
+   *
+   * @param transport - The server transport for the new connection
+   * @returns The session ID
+   */
+  handleConnection(transport) {
+    if (this.maxConnections > 0 && this.sessions.size >= this.maxConnections) {
+      transport.send({
+        type: "error",
+        messageId: (0, import_core7.generateUUIDv7)(),
+        code: "MAX_CONNECTIONS",
+        message: `Server has reached maximum connections (${this.maxConnections})`,
+        retriable: true
+      });
+      transport.close(4029, "max connections reached");
+      throw new import_core7.SyncError("Maximum connections reached", {
+        current: this.sessions.size,
+        max: this.maxConnections
+      });
+    }
+    const sessionId = (0, import_core7.generateUUIDv7)();
+    const session = new ClientSession({
+      sessionId,
+      transport,
+      store: this.store,
+      auth: this.auth ?? void 0,
+      serializer: this.serializer,
+      emitter: this.emitter ?? void 0,
+      batchSize: this.batchSize,
+      schemaVersion: this.schemaVersion,
+      onRelay: (sourceSessionId, operations2) => {
+        this.handleRelay(sourceSessionId, operations2);
+      },
+      onClose: (sid) => {
+        this.handleSessionClose(sid);
+      }
+    });
+    this.sessions.set(sessionId, session);
+    session.start();
+    return sessionId;
+  }
+  /**
+   * Get the current server status.
+   */
+  async getStatus() {
+    return {
+      running: this.running,
+      connectedClients: this.sessions.size,
+      port: this.port ?? null,
+      totalOperations: await this.store.getOperationCount()
+    };
+  }
+  /**
+   * Get the number of currently connected clients.
+   */
+  getConnectionCount() {
+    return this.sessions.size;
+  }
+  // --- Private ---
+  handleRelay(sourceSessionId, operations2) {
+    for (const [sessionId, session] of this.sessions) {
+      if (sessionId === sourceSessionId) continue;
+      session.relayOperations(operations2);
+    }
+  }
+  handleSessionClose(sessionId) {
+    this.sessions.delete(sessionId);
+    const clientId = this.httpSessionToClient.get(sessionId);
+    if (clientId) {
+      this.httpSessionToClient.delete(sessionId);
+      this.httpClients.delete(clientId);
+    }
+  }
+  getOrCreateHttpClient(clientId) {
+    const existing = this.httpClients.get(clientId);
+    if (existing) {
+      return existing;
+    }
+    const transport = new HttpServerTransport(this.serializer);
+    const sessionId = this.handleConnection(transport);
+    const client = { sessionId, transport };
+    this.httpClients.set(clientId, client);
+    this.httpSessionToClient.set(sessionId, clientId);
+    return client;
+  }
+};
+function normalizeHttpBody(body, contentType) {
+  if (body instanceof Uint8Array) {
+    return body;
+  }
+  if (contentType?.includes("application/x-protobuf")) {
+    return new TextEncoder().encode(body);
+  }
+  return body;
+}
+
+// src/auth/no-auth.ts
+var NoAuthProvider = class {
+  async authenticate(_token) {
+    return { userId: "anonymous" };
+  }
+};
+
+// src/auth/token-auth.ts
+var TokenAuthProvider = class {
+  validate;
+  constructor(options) {
+    this.validate = options.validate;
+  }
+  async authenticate(token) {
+    return this.validate(token);
+  }
+};
+
+// src/server/create-server.ts
+function createKoraServer(config) {
+  return new KoraSyncServer(config);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ClientSession,
+  HttpServerTransport,
+  KoraSyncServer,
+  MemoryServerStore,
+  NoAuthProvider,
+  PostgresServerStore,
+  SqliteServerStore,
+  TokenAuthProvider,
+  WsServerTransport,
+  createKoraServer,
+  createPostgresServerStore,
+  createSqliteServerStore
+});
+//# sourceMappingURL=index.cjs.map