@korajs/server 0.3.2 → 0.4.0

package/dist/index.cjs

@@ -30,11 +30,13 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  AwarenessRelay: () => AwarenessRelay,
   ClientSession: () => ClientSession,
   HttpServerTransport: () => HttpServerTransport,
   KoraAuthProvider: () => KoraAuthProvider,
   KoraSyncServer: () => KoraSyncServer,
   MemoryServerStore: () => MemoryServerStore,
+  MixedAuthProvider: () => MixedAuthProvider,
   NoAuthProvider: () => NoAuthProvider,
   PostgresServerStore: () => PostgresServerStore,
   SqliteServerStore: () => SqliteServerStore,
@@ -116,9 +118,7 @@ ALTER TABLE ${name} ADD COLUMN ${colDef}`);
       `CREATE INDEX IF NOT EXISTS idx_${name}_${indexField} ON ${name} (${indexField})`
     );
   }
-  statements.push(
-    `CREATE INDEX IF NOT EXISTS idx_${name}__deleted ON ${name} (_deleted)`
-  );
+  statements.push(`CREATE INDEX IF NOT EXISTS idx_${name}__deleted ON ${name} (_deleted)`);
   return statements;
 }
 function generateAllCollectionDDL(schema, dialect) {
@@ -233,7 +233,7 @@ var MemoryServerStore = class {
     if (op.sequenceNumber > currentSeq) {
       this.versionVector.set(op.nodeId, op.sequenceNumber);
     }
-    if (this.schema && this.schema.collections[op.collection]) {
+    if (this.schema?.collections[op.collection]) {
       this.rebuildMaterializedRecord(op.collection, op.recordId);
     }
     return "applied";
@@ -250,7 +250,7 @@ var MemoryServerStore = class {
   }
   async materializeCollection(collection) {
     this.assertOpen();
-    if (this.schema && this.schema.collections[collection]) {
+    if (this.schema?.collections[collection]) {
       return this.queryCollection(collection);
     }
     return this.materializeFromOps(collection);
@@ -259,13 +259,14 @@ var MemoryServerStore = class {
     this.assertOpen();
     this.assertSchema();
     this.assertCollection(collection);
+    const schema = this.schema;
     if (options?.where) {
       for (const key of Object.keys(options.where)) {
-        validateFieldName(collection, key, this.schema);
+        validateFieldName(collection, key, schema);
       }
     }
     if (options?.orderBy) {
-      validateFieldName(collection, options.orderBy, this.schema);
+      validateFieldName(collection, options.orderBy, schema);
     }
     const collectionMap = this.materializedRecords.get(collection);
     if (!collectionMap) return [];
@@ -332,9 +333,10 @@ var MemoryServerStore = class {
     this.assertOpen();
     this.assertSchema();
     this.assertCollection(collection);
+    const schema = this.schema;
     if (where) {
       for (const key of Object.keys(where)) {
-        validateFieldName(collection, key, this.schema);
+        validateFieldName(collection, key, schema);
       }
     }
     const collectionMap = this.materializedRecords.get(collection);
@@ -370,7 +372,7 @@ var MemoryServerStore = class {
   // Materialization internals
   // ---------------------------------------------------------------------------
   rebuildMaterializedRecord(collection, recordId) {
-    const collectionDef = this.schema.collections[collection];
+    const collectionDef = this.schema?.collections[collection];
     if (!collectionDef) return;
     let collectionMap = this.materializedRecords.get(collection);
     if (!collectionMap) {
@@ -378,8 +380,10 @@ var MemoryServerStore = class {
       this.materializedRecords.set(collection, collectionMap);
     }
     const recordOps = this.operations.filter((op) => op.collection === collection && op.recordId === recordId).sort((a, b) => {
-      if (a.timestamp.wallTime !== b.timestamp.wallTime) return a.timestamp.wallTime - b.timestamp.wallTime;
-      if (a.timestamp.logical !== b.timestamp.logical) return a.timestamp.logical - b.timestamp.logical;
+      if (a.timestamp.wallTime !== b.timestamp.wallTime)
+        return a.timestamp.wallTime - b.timestamp.wallTime;
+      if (a.timestamp.logical !== b.timestamp.logical)
+        return a.timestamp.logical - b.timestamp.logical;
       return a.sequenceNumber - b.sequenceNumber;
     });
     const parsedOps = recordOps.map((op) => ({
@@ -431,8 +435,10 @@ var MemoryServerStore = class {
   // ---------------------------------------------------------------------------
   materializeFromOps(collection) {
     const collectionOps = this.operations.filter((op) => op.collection === collection).sort((a, b) => {
-      if (a.timestamp.wallTime !== b.timestamp.wallTime) return a.timestamp.wallTime - b.timestamp.wallTime;
-      if (a.timestamp.logical !== b.timestamp.logical) return a.timestamp.logical - b.timestamp.logical;
+      if (a.timestamp.wallTime !== b.timestamp.wallTime)
+        return a.timestamp.wallTime - b.timestamp.wallTime;
+      if (a.timestamp.logical !== b.timestamp.logical)
+        return a.timestamp.logical - b.timestamp.logical;
       return a.sequenceNumber - b.sequenceNumber;
     });
     const records = /* @__PURE__ */ new Map();
@@ -478,9 +484,10 @@ var MemoryServerStore = class {
     }
   }
   assertCollection(collection) {
-    if (!this.schema.collections[collection]) {
+    const schema = this.schema;
+    if (!schema.collections[collection]) {
       throw new Error(
-        `Unknown collection "${collection}". Available: ${Object.keys(this.schema.collections).join(", ")}`
+        `Unknown collection "${collection}". Available: ${Object.keys(schema.collections).join(", ")}`
       );
     }
   }
@@ -556,7 +563,9 @@ var PostgresServerStore = class {
         try {
           await this.db.execute(import_drizzle_orm.sql.raw(alterSql));
         } catch (e) {
-          if (!(e instanceof Error && (e.message.includes("already exists") || e.message.includes("duplicate column")))) {
+          const msg = e instanceof Error ? e.message : "";
+          const causeMsg = e instanceof Error && e.cause instanceof Error ? e.cause.message : "";
+          if (!msg.includes("already exists") && !msg.includes("duplicate column") && !causeMsg.includes("already exists") && !causeMsg.includes("duplicate column")) {
             throw e;
           }
         }
@@ -588,7 +597,7 @@ var PostgresServerStore = class {
           lastSeenAt: import_drizzle_orm.sql`${now}`
         }
       });
-      if (this.schema && this.schema.collections[op.collection]) {
+      if (this.schema?.collections[op.collection]) {
         await this.rebuildMaterializedRecord(tx, op.collection, op.recordId);
       }
     });
@@ -602,10 +611,7 @@ var PostgresServerStore = class {
     this.assertOpen();
     await this.ready;
     const rows = await this.db.select().from(pgOperations).where(
-      (0, import_drizzle_orm.and)(
-        (0, import_drizzle_orm.eq)(pgOperations.nodeId, nodeId),
-        (0, import_drizzle_orm.between)(pgOperations.sequenceNumber, fromSeq, toSeq)
-      )
+      (0, import_drizzle_orm.and)((0, import_drizzle_orm.eq)(pgOperations.nodeId, nodeId), (0, import_drizzle_orm.between)(pgOperations.sequenceNumber, fromSeq, toSeq))
     ).orderBy((0, import_drizzle_orm.asc)(pgOperations.sequenceNumber));
     return rows.map((row) => this.deserializeOperation(row));
   }
@@ -618,7 +624,7 @@ var PostgresServerStore = class {
   async materializeCollection(collection) {
     this.assertOpen();
     await this.ready;
-    if (this.schema && this.schema.collections[collection]) {
+    if (this.schema?.collections[collection]) {
       return this.queryCollection(collection);
     }
     return this.materializeFromOpsLog(collection);
@@ -628,14 +634,15 @@ var PostgresServerStore = class {
     await this.ready;
     this.assertSchema();
     this.assertCollection(collection);
-    const collectionDef = this.schema.collections[collection];
+    const schema = this.schema;
+    const collectionDef = schema.collections[collection];
     if (options?.where) {
       for (const key of Object.keys(options.where)) {
-        validateFieldName(collection, key, this.schema);
+        validateFieldName(collection, key, schema);
       }
     }
     if (options?.orderBy) {
-      validateFieldName(collection, options.orderBy, this.schema);
+      validateFieldName(collection, options.orderBy, schema);
     }
     const query = this.buildSelectQuery(collection, options);
     const rows = await this.db.execute(query);
@@ -646,7 +653,8 @@ var PostgresServerStore = class {
     await this.ready;
     this.assertSchema();
     this.assertCollection(collection);
-    const collectionDef = this.schema.collections[collection];
+    const schema = this.schema;
+    const collectionDef = schema.collections[collection];
     const query = import_drizzle_orm.sql`SELECT * FROM ${import_drizzle_orm.sql.raw(collection)} WHERE id = ${id} AND _deleted = 0`;
     const rows = await this.db.execute(query);
     if (rows.length === 0) return null;
@@ -657,9 +665,10 @@ var PostgresServerStore = class {
     await this.ready;
     this.assertSchema();
     this.assertCollection(collection);
+    const schema = this.schema;
     if (where) {
       for (const key of Object.keys(where)) {
-        validateFieldName(collection, key, this.schema);
+        validateFieldName(collection, key, schema);
       }
     }
     const whereClause = this.buildWhereClause(where ?? {}, false);
@@ -679,18 +688,13 @@ var PostgresServerStore = class {
    * all operations for that record.
    */
   async rebuildMaterializedRecord(txOrDb, collection, recordId) {
-    const collectionDef = this.schema.collections[collection];
+    const collectionDef = this.schema?.collections[collection];
     if (!collectionDef) return;
     const ops = await txOrDb.select({
       type: pgOperations.type,
       data: pgOperations.data,
       wallTime: pgOperations.wallTime
-    }).from(pgOperations).where(
-      (0, import_drizzle_orm.and)(
-        (0, import_drizzle_orm.eq)(pgOperations.collection, collection),
-        (0, import_drizzle_orm.eq)(pgOperations.recordId, recordId)
-      )
-    ).orderBy(
+    }).from(pgOperations).where((0, import_drizzle_orm.and)((0, import_drizzle_orm.eq)(pgOperations.collection, collection), (0, import_drizzle_orm.eq)(pgOperations.recordId, recordId))).orderBy(
       (0, import_drizzle_orm.asc)(pgOperations.wallTime),
       (0, import_drizzle_orm.asc)(pgOperations.logical),
       (0, import_drizzle_orm.asc)(pgOperations.sequenceNumber)
@@ -760,7 +764,7 @@ var PostgresServerStore = class {
    * Backfill a single collection's materialized table from operations.
    */
   async backfillCollection(collectionName) {
-    const collectionDef = this.schema.collections[collectionName];
+    const collectionDef = this.schema?.collections[collectionName];
     if (!collectionDef) return;
     const allOps = await this.db.select({
       recordId: pgOperations.recordId,
@@ -817,9 +821,7 @@ var PostgresServerStore = class {
       options?.where ?? {},
       options?.includeDeleted ?? false
     );
-    const parts = [
-      import_drizzle_orm.sql`SELECT * FROM ${import_drizzle_orm.sql.raw(collection)} WHERE ${whereClause}`
-    ];
+    const parts = [import_drizzle_orm.sql`SELECT * FROM ${import_drizzle_orm.sql.raw(collection)} WHERE ${whereClause}`];
     if (options?.orderBy) {
       const dir = options.orderDirection === "desc" ? "DESC" : "ASC";
       parts.push(import_drizzle_orm.sql.raw(` ORDER BY ${options.orderBy} ${dir}`));
@@ -932,12 +934,8 @@ var PostgresServerStore = class {
     await this.db.execute(
       import_drizzle_orm.sql`CREATE INDEX IF NOT EXISTS idx_node_seq ON operations (node_id, sequence_number)`
     );
-    await this.db.execute(
-      import_drizzle_orm.sql`CREATE INDEX IF NOT EXISTS idx_collection ON operations (collection)`
-    );
-    await this.db.execute(
-      import_drizzle_orm.sql`CREATE INDEX IF NOT EXISTS idx_received ON operations (received_at)`
-    );
+    await this.db.execute(import_drizzle_orm.sql`CREATE INDEX IF NOT EXISTS idx_collection ON operations (collection)`);
+    await this.db.execute(import_drizzle_orm.sql`CREATE INDEX IF NOT EXISTS idx_received ON operations (received_at)`);
     await this.db.execute(
       import_drizzle_orm.sql`CREATE INDEX IF NOT EXISTS idx_collection_record ON operations (collection, record_id)`
     );
@@ -1005,9 +1003,10 @@ var PostgresServerStore = class {
     }
   }
   assertCollection(collection) {
-    if (!this.schema.collections[collection]) {
+    const schema = this.schema;
+    if (!schema.collections[collection]) {
       throw new Error(
-        `Unknown collection "${collection}". Available: ${Object.keys(this.schema.collections).join(", ")}`
+        `Unknown collection "${collection}". Available: ${Object.keys(schema.collections).join(", ")}`
       );
     }
   }
@@ -1140,7 +1139,7 @@ var SqliteServerStore = class {
           lastSeenAt: import_drizzle_orm2.sql`${now}`
         }
       }).run();
-      if (this.schema && this.schema.collections[op.collection]) {
+      if (this.schema?.collections[op.collection]) {
         this.rebuildMaterializedRecord(tx, op.collection, op.recordId);
       }
       return "applied";
@@ -1159,7 +1158,7 @@ var SqliteServerStore = class {
   }
   async materializeCollection(collection) {
     this.assertOpen();
-    if (this.schema && this.schema.collections[collection]) {
+    if (this.schema?.collections[collection]) {
       return this.queryCollection(collection);
     }
     return this.materializeFromOpsLog(collection);
@@ -1168,14 +1167,15 @@ var SqliteServerStore = class {
     this.assertOpen();
     this.assertSchema();
     this.assertCollection(collection);
-    const collectionDef = this.schema.collections[collection];
+    const schema = this.schema;
+    const collectionDef = schema.collections[collection];
     if (options?.where) {
       for (const key of Object.keys(options.where)) {
-        validateFieldName(collection, key, this.schema);
+        validateFieldName(collection, key, schema);
       }
     }
     if (options?.orderBy) {
-      validateFieldName(collection, options.orderBy, this.schema);
+      validateFieldName(collection, options.orderBy, schema);
     }
     const query = this.buildSelectQuery(collection, options);
     const rows = this.db.all(query);
@@ -1185,7 +1185,8 @@ var SqliteServerStore = class {
     this.assertOpen();
     this.assertSchema();
     this.assertCollection(collection);
-    const collectionDef = this.schema.collections[collection];
+    const schema = this.schema;
+    const collectionDef = schema.collections[collection];
     const query = import_drizzle_orm2.sql`SELECT * FROM ${import_drizzle_orm2.sql.raw(collection)} WHERE id = ${id} AND _deleted = 0`;
     const rows = this.db.all(query);
     if (rows.length === 0) return null;
@@ -1195,9 +1196,10 @@ var SqliteServerStore = class {
     this.assertOpen();
     this.assertSchema();
     this.assertCollection(collection);
+    const schema = this.schema;
     if (where) {
       for (const key of Object.keys(where)) {
-        validateFieldName(collection, key, this.schema);
+        validateFieldName(collection, key, schema);
       }
     }
     const whereClause = this.buildWhereClause(where ?? {}, false);
@@ -1217,18 +1219,13 @@ var SqliteServerStore = class {
    * transaction for atomic dual-write.
    */
   rebuildMaterializedRecord(txOrDb, collection, recordId) {
-    const collectionDef = this.schema.collections[collection];
+    const collectionDef = this.schema?.collections[collection];
     if (!collectionDef) return;
     const ops = txOrDb.select({
       type: operations.type,
       data: operations.data,
       wallTime: operations.wallTime
-    }).from(operations).where(
-      (0, import_drizzle_orm2.and)(
-        (0, import_drizzle_orm2.eq)(operations.collection, collection),
-        (0, import_drizzle_orm2.eq)(operations.recordId, recordId)
-      )
-    ).orderBy((0, import_drizzle_orm2.asc)(operations.wallTime), (0, import_drizzle_orm2.asc)(operations.logical), (0, import_drizzle_orm2.asc)(operations.sequenceNumber)).all();
+    }).from(operations).where((0, import_drizzle_orm2.and)((0, import_drizzle_orm2.eq)(operations.collection, collection), (0, import_drizzle_orm2.eq)(operations.recordId, recordId))).orderBy((0, import_drizzle_orm2.asc)(operations.wallTime), (0, import_drizzle_orm2.asc)(operations.logical), (0, import_drizzle_orm2.asc)(operations.sequenceNumber)).all();
     const parsedOps = ops.map((op) => ({
       type: op.type,
       data: op.data !== null ? JSON.parse(op.data) : null
@@ -1297,7 +1294,7 @@ var SqliteServerStore = class {
    * Backfill a single collection's materialized table from operations.
    */
   backfillCollection(collectionName) {
-    const collectionDef = this.schema.collections[collectionName];
+    const collectionDef = this.schema?.collections[collectionName];
     if (!collectionDef) return;
     const allOps = this.db.select({
       recordId: operations.recordId,
@@ -1352,9 +1349,7 @@ var SqliteServerStore = class {
       options?.where ?? {},
       options?.includeDeleted ?? false
     );
-    const parts = [
-      import_drizzle_orm2.sql`SELECT * FROM ${import_drizzle_orm2.sql.raw(collection)} WHERE ${whereClause}`
-    ];
+    const parts = [import_drizzle_orm2.sql`SELECT * FROM ${import_drizzle_orm2.sql.raw(collection)} WHERE ${whereClause}`];
     if (options?.orderBy) {
       const dir = options.orderDirection === "desc" ? "DESC" : "ASC";
       parts.push(import_drizzle_orm2.sql.raw(` ORDER BY ${options.orderBy} ${dir}`));
@@ -1529,9 +1524,10 @@ var SqliteServerStore = class {
     }
   }
   assertCollection(collection) {
-    if (!this.schema.collections[collection]) {
+    const schema = this.schema;
+    if (!schema.collections[collection]) {
       throw new Error(
-        `Unknown collection "${collection}". Available: ${Object.keys(this.schema.collections).join(", ")}`
+        `Unknown collection "${collection}". Available: ${Object.keys(schema.collections).join(", ")}`
       );
     }
   }
@@ -1741,6 +1737,7 @@ var ClientSession = class {
   batchSize;
   schemaVersion;
   onRelay;
+  onAwarenessUpdate;
   onClose;
   constructor(options) {
     this.sessionId = options.sessionId;
@@ -1752,6 +1749,7 @@ var ClientSession = class {
     this.batchSize = options.batchSize ?? DEFAULT_BATCH_SIZE;
     this.schemaVersion = options.schemaVersion ?? DEFAULT_SCHEMA_VERSION;
     this.onRelay = options.onRelay ?? null;
+    this.onAwarenessUpdate = options.onAwarenessUpdate ?? null;
     this.onClose = options.onClose ?? null;
   }
   /**
@@ -1814,6 +1812,13 @@ var ClientSession = class {
   isStreaming() {
     return this.state === "streaming";
   }
+  /**
+   * Get the transport for this session.
+   * Used by the awareness relay to send messages to this client.
+   */
+  getTransport() {
+    return this.transport;
+  }
   // --- Private protocol handlers ---
   handleMessage(message) {
     switch (message.type) {
@@ -1828,6 +1833,9 @@ var ClientSession = class {
         break;
       case "error":
         break;
+      case "awareness-update":
+        this.handleAwarenessUpdate(message);
+        break;
     }
   }
   async handleHandshake(msg) {
@@ -1847,6 +1855,19 @@ var ClientSession = class {
       this.authContext = context;
       this.state = "authenticated";
     }
+    if (msg.syncScope) {
+      const mergedScopes = { ...msg.syncScope };
+      if (this.authContext?.scopes) {
+        for (const [collection, authScope] of Object.entries(this.authContext.scopes)) {
+          mergedScopes[collection] = { ...mergedScopes[collection] ?? {}, ...authScope };
+        }
+      }
+      if (this.authContext) {
+        this.authContext = { ...this.authContext, scopes: mergedScopes };
+      } else {
+        this.authContext = { userId: msg.nodeId, scopes: mergedScopes };
+      }
+    }
     const serverVector = this.store.getVersionVector();
     const selectedWireFormat = selectWireFormat(msg.supportedWireFormats);
     this.setSerializerWireFormat(selectedWireFormat);
@@ -1857,7 +1878,10 @@ var ClientSession = class {
       versionVector: (0, import_sync2.versionVectorToWire)(serverVector),
       schemaVersion: this.schemaVersion,
       accepted: true,
-      selectedWireFormat
+      selectedWireFormat,
+      // Confirm the accepted scope so the client knows what data will be synced.
+      // This may differ from what the client requested if auth scopes are narrower.
+      ...this.authContext?.scopes ? { acceptedScope: this.authContext.scopes } : {}
     };
     this.transport.send(response);
     this.emitter?.emit({ type: "sync:connected", nodeId: msg.nodeId });
@@ -1869,8 +1893,10 @@ var ClientSession = class {
   async handleOperationBatch(msg) {
     const operations2 = msg.operations.map((s) => this.serializer.decodeOperation(s));
     const applied = [];
+    const rejected = [];
     for (const op of operations2) {
       if (!operationMatchesScopes(op, this.authContext?.scopes)) {
+        rejected.push(op);
         continue;
       }
       const result = await this.store.applyRemoteOperation(op);
@@ -1878,6 +1904,15 @@ var ClientSession = class {
         applied.push(op);
       }
     }
+    if (rejected.length > 0) {
+      for (const op of rejected) {
+        this.sendError(
+          "SCOPE_VIOLATION",
+          `Operation "${op.id}" in collection "${op.collection}" is outside the client's sync scope`,
+          false
+        );
+      }
+    }
     if (operations2.length > 0) {
       this.emitter?.emit({
         type: "sync:received",
@@ -1940,6 +1975,9 @@ var ClientSession = class {
       });
     }
   }
+  handleAwarenessUpdate(msg) {
+    this.onAwarenessUpdate?.(this.sessionId, msg);
+  }
   sendError(code, message, retriable) {
     const errorMsg = {
       type: "error",
@@ -1970,8 +2008,107 @@ function selectWireFormat(supportedWireFormats) {
 }
 
 // src/server/kora-sync-server.ts
-var import_core7 = require("@korajs/core");
+var import_core8 = require("@korajs/core");
 var import_sync3 = require("@korajs/sync");
+
+// src/awareness/awareness-relay.ts
+var import_core7 = require("@korajs/core");
+var AwarenessRelay = class {
+  clients = /* @__PURE__ */ new Map();
+  /**
+   * Register a client for awareness broadcasting.
+   *
+   * @param sessionId - Unique session identifier
+   * @param clientId - Client-assigned awareness ID
+   * @param transport - Transport for sending messages to this client
+   */
+  addClient(sessionId, clientId, transport) {
+    this.clients.set(sessionId, {
+      sessionId,
+      clientId,
+      transport,
+      state: null
+    });
+    const existingStates = {};
+    let hasStates = false;
+    for (const [, client] of this.clients) {
+      if (client.sessionId === sessionId) continue;
+      if (client.state) {
+        existingStates[String(client.clientId)] = client.state;
+        hasStates = true;
+      }
+    }
+    if (hasStates) {
+      const catchUpMsg = {
+        type: "awareness-update",
+        messageId: (0, import_core7.generateUUIDv7)(),
+        clientId: 0,
+        // Server-sourced
+        states: existingStates
+      };
+      transport.send(catchUpMsg);
+    }
+  }
+  /**
+   * Remove a client and broadcast its removal to all remaining clients.
+   *
+   * @param sessionId - Session ID of the disconnecting client
+   */
+  removeClient(sessionId) {
+    const client = this.clients.get(sessionId);
+    if (!client) return;
+    this.clients.delete(sessionId);
+    if (client.state === null) return;
+    const removalStates = {
+      [String(client.clientId)]: null
+    };
+    const msg = {
+      type: "awareness-update",
+      messageId: (0, import_core7.generateUUIDv7)(),
+      clientId: client.clientId,
+      states: removalStates
+    };
+    this.broadcastExcept(sessionId, msg);
+  }
+  /**
+   * Handle an incoming awareness update from a client.
+   * Stores the state and relays to all other connected clients.
+   *
+   * @param sessionId - Session ID of the sending client
+   * @param message - The awareness update message
+   */
+  handleUpdate(sessionId, message) {
+    const sender = this.clients.get(sessionId);
+    if (!sender) return;
+    const senderState = message.states[String(message.clientId)];
+    if (senderState !== void 0) {
+      sender.state = senderState;
+    }
+    this.broadcastExcept(sessionId, message);
+  }
+  /**
+   * Get the number of registered awareness clients.
+   */
+  getClientCount() {
+    return this.clients.size;
+  }
+  /**
+   * Remove all clients and clear all state.
+   */
+  clear() {
+    this.clients.clear();
+  }
+  // --- Private ---
+  broadcastExcept(excludeSessionId, message) {
+    for (const [, client] of this.clients) {
+      if (client.sessionId === excludeSessionId) continue;
+      if (!client.transport.isConnected()) continue;
+      client.transport.send(message);
+    }
+  }
+};
+
+// src/server/kora-sync-server.ts
 var DEFAULT_MAX_CONNECTIONS = 0;
 var DEFAULT_BATCH_SIZE2 = 100;
 var DEFAULT_SCHEMA_VERSION2 = 1;
@@ -1988,6 +2125,7 @@ var KoraSyncServer = class {
   port;
   host;
   path;
+  awarenessRelay = new AwarenessRelay();
   sessions = /* @__PURE__ */ new Map();
   httpClients = /* @__PURE__ */ new Map();
   httpSessionToClient = /* @__PURE__ */ new Map();
@@ -2012,10 +2150,10 @@ var KoraSyncServer = class {
    */
   async start(wsServerImpl) {
     if (this.running) {
-      throw new import_core7.SyncError("Server is already running", { port: this.port });
+      throw new import_core8.SyncError("Server is already running", { port: this.port });
     }
     if (!wsServerImpl && this.port === void 0) {
-      throw new import_core7.SyncError(
+      throw new import_core8.SyncError(
         "Port is required for standalone mode. Provide port in config or use handleConnection() for attach mode.",
         {}
       );
@@ -2049,6 +2187,7 @@ var KoraSyncServer = class {
    * Stop the server. Closes all sessions and the WebSocket server.
    */
   async stop() {
+    this.awarenessRelay.clear();
     for (const session of this.sessions.values()) {
       session.close("server shutting down");
     }
@@ -2105,18 +2244,18 @@ var KoraSyncServer = class {
     if (this.maxConnections > 0 && this.sessions.size >= this.maxConnections) {
       transport.send({
         type: "error",
-        messageId: (0, import_core7.generateUUIDv7)(),
+        messageId: (0, import_core8.generateUUIDv7)(),
         code: "MAX_CONNECTIONS",
         message: `Server has reached maximum connections (${this.maxConnections})`,
         retriable: true
       });
       transport.close(4029, "max connections reached");
-      throw new import_core7.SyncError("Maximum connections reached", {
+      throw new import_core8.SyncError("Maximum connections reached", {
         current: this.sessions.size,
         max: this.maxConnections
       });
     }
-    const sessionId = (0, import_core7.generateUUIDv7)();
+    const sessionId = (0, import_core8.generateUUIDv7)();
     const session = new ClientSession({
       sessionId,
       transport,
@@ -2129,6 +2268,9 @@ var KoraSyncServer = class {
       onRelay: (sourceSessionId, operations2) => {
         this.handleRelay(sourceSessionId, operations2);
       },
+      onAwarenessUpdate: (sourceSessionId, message) => {
+        this.handleAwarenessRelay(sourceSessionId, message);
+      },
       onClose: (sid) => {
         this.handleSessionClose(sid);
       }
@@ -2162,6 +2304,7 @@ var KoraSyncServer = class {
     }
   }
   handleSessionClose(sessionId) {
+    this.awarenessRelay.removeClient(sessionId);
     this.sessions.delete(sessionId);
     const clientId = this.httpSessionToClient.get(sessionId);
     if (clientId) {
@@ -2169,6 +2312,15 @@ var KoraSyncServer = class {
       this.httpClients.delete(clientId);
     }
   }
+  handleAwarenessRelay(sourceSessionId, message) {
+    const session = this.sessions.get(sourceSessionId);
+    if (!session) return;
+    const transport = session.getTransport();
+    if (!this.awarenessRelay.getClientCount() || !transport) {
+    }
+    this.awarenessRelay.addClient(sourceSessionId, message.clientId, transport);
+    this.awarenessRelay.handleUpdate(sourceSessionId, message);
+  }
   getOrCreateHttpClient(clientId) {
     const existing = this.httpClients.get(clientId);
     if (existing) {
@@ -2250,6 +2402,30 @@ var KoraAuthProvider = class {
   }
 };
 
+// src/auth/mixed-auth-provider.ts
+var MixedAuthProvider = class {
+  primary;
+  anonymousScopes;
+  anonymousPrefix;
+  anonymousCounter = 0;
+  constructor(options) {
+    this.primary = options.primary;
+    this.anonymousScopes = options.anonymousScopes;
+    this.anonymousPrefix = options.anonymousPrefix ?? "anon";
+  }
+  async authenticate(token) {
+    if (token) {
+      const ctx = await this.primary.authenticate(token);
+      if (ctx) return ctx;
+    }
+    this.anonymousCounter++;
+    return {
+      userId: `${this.anonymousPrefix}-${Date.now()}-${this.anonymousCounter}`,
+      scopes: this.anonymousScopes
+    };
+  }
+};
+
 // src/server/create-server.ts
 function createKoraServer(config) {
   return new KoraSyncServer(config);
@@ -2338,7 +2514,7 @@ function createProductionServer(config) {
         }
       });
       return new Promise((resolve2) => {
-        httpServer.listen(port, "0.0.0.0", () => {
+        httpServer?.listen(port, "0.0.0.0", () => {
           resolve2(`http://localhost:${port}`);
         });
       });
@@ -2347,7 +2523,7 @@ function createProductionServer(config) {
       await syncServer.stop();
       if (httpServer) {
         await new Promise((resolve) => {
-          httpServer.close(() => resolve());
+          httpServer?.close(() => resolve());
         });
         httpServer = null;
       }
@@ -2356,11 +2532,13 @@ function createProductionServer(config) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  AwarenessRelay,
   ClientSession,
   HttpServerTransport,
   KoraAuthProvider,
   KoraSyncServer,
   MemoryServerStore,
+  MixedAuthProvider,
   NoAuthProvider,
   PostgresServerStore,
   SqliteServerStore,