@ouispec/agent-realtime 0.1.0

package/dist/approvals/token.d.ts

@@ -0,0 +1,19 @@
+import { type ApprovalTokenClaims } from '@ouispec/agent-core';
+export declare const MIN_APPROVAL_KEY_LENGTH = 32;
+export type ApprovalTokenCheck = {
+    ok: true;
+    claims: ApprovalTokenClaims;
+} | {
+    ok: false;
+    reason: 'invalid' | 'expired';
+    error: string;
+};
+export interface ApprovalTokenSigner {
+    sign(claims: ApprovalTokenClaims): string;
+    /** The claims of a token this key signed, still unexpired; otherwise why not. */
+    verify(token: string, nowMs?: number): ApprovalTokenCheck;
+}
+export declare function createApprovalTokenSigner(options: {
+    signingKey: string;
+}): ApprovalTokenSigner;
+//# sourceMappingURL=token.d.ts.map

package/dist/approvals/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/approvals/token.ts"],"names":[],"mappings":"AAUA,OAAO,EAAwC,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAErG,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAI1C,MAAM,MAAM,kBAAkB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzI,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAAC;IAC1C,iFAAiF;IACjF,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAAC;CAC3D;AAYD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,CAwC9F"}

package/dist/approvals/token.js

@@ -0,0 +1,73 @@
+/**
+ * The approval token (ADR-0228 §2.3): a compact JWS, HS256, signed with the
+ * environment's approval key. It is ADR-0210's `commit_token`: an engine in
+ * another language verifies it with the same key.
+ *
+ * Only the approval store signs one, and only when the approval's own user
+ * decided it. A token proves that decision; the store's record (single use,
+ * the stored call) is what redemption checks it against.
+ */
+import crypto from 'node:crypto';
+import { APPROVAL_CHANNELS, ARGS_HASH_PATTERN } from '@ouispec/agent-core';
+export const MIN_APPROVAL_KEY_LENGTH = 32;
+const HEADER = Buffer.from(JSON.stringify({ alg: 'HS256', typ: 'JWT' })).toString('base64url');
+const STRING_CLAIMS = ['aid', 'sub', 'cid', 'tool', 'eff', 'jti'];
+function claimsProblem(c) {
+    for (const k of STRING_CLAIMS)
+        if (typeof c[k] !== 'string' || !c[k])
+            return `claim ${k} is missing`;
+    if (typeof c.ah !== 'string' || !ARGS_HASH_PATTERN.test(c.ah))
+        return 'claim ah is not an args hash';
+    if (!APPROVAL_CHANNELS.includes(c.ch))
+        return 'claim ch is not a channel';
+    for (const k of ['iat', 'exp'])
+        if (!Number.isInteger(c[k]))
+            return `claim ${k} is not a time`;
+    return null;
+}
+export function createApprovalTokenSigner(options) {
+    const { signingKey } = options;
+    if (typeof signingKey !== 'string' || signingKey.length < MIN_APPROVAL_KEY_LENGTH) {
+        throw new Error(`[agent-sdk-realtime] approvals.signingKey must be at least ${MIN_APPROVAL_KEY_LENGTH} characters: it signs every approval token`);
+    }
+    const mac = (input) => crypto.createHmac('sha256', signingKey).update(input).digest();
+    return {
+        sign(claims) {
+            const problem = claimsProblem(claims);
+            if (problem)
+                throw new Error(`[agent-sdk-realtime] Cannot sign an approval token: ${problem}`);
+            const signingInput = `${HEADER}.${Buffer.from(JSON.stringify(claims)).toString('base64url')}`;
+            return `${signingInput}.${mac(signingInput).toString('base64url')}`;
+        },
+        verify(token, nowMs = Date.now()) {
+            const invalid = (error) => ({ ok: false, reason: 'invalid', error });
+            if (typeof token !== 'string')
+                return invalid('not a token');
+            const parts = token.split('.');
+            if (parts.length !== 3)
+                return invalid('not a compact JWS');
+            const [header, payload, signature] = parts;
+            // Only this header: no `alg` a token could choose for itself, `none` included.
+            if (header !== HEADER)
+                return invalid('not an HS256 approval token');
+            const presented = Buffer.from(signature, 'base64url');
+            const expected = mac(`${header}.${payload}`);
+            if (presented.length !== expected.length || !crypto.timingSafeEqual(presented, expected))
+                return invalid('bad signature');
+            let claims;
+            try {
+                claims = JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
+            }
+            catch {
+                return invalid('unreadable claims');
+            }
+            const problem = claimsProblem(claims);
+            if (problem)
+                return invalid(problem);
+            if (nowMs >= claims.exp * 1000)
+                return { ok: false, reason: 'expired', error: 'the approval has expired' };
+            return { ok: true, claims: claims };
+        },
+    };
+}
+//# sourceMappingURL=token.js.map

package/dist/approvals/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/approvals/token.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAA4B,MAAM,qBAAqB,CAAC;AAErG,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAE1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAU/F,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAU,CAAC;AAE3E,SAAS,aAAa,CAAC,CAA0B;IAC/C,KAAK,MAAM,CAAC,IAAI,aAAa;QAAE,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC,aAAa,CAAC;IACrG,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,OAAO,8BAA8B,CAAC;IACrG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAW,CAAC;QAAE,OAAO,2BAA2B,CAAC;IACnF,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAU;QAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC,gBAAgB,CAAC;IACxG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAA+B;IACvE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC/B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CACb,8DAA8D,uBAAuB,4CAA4C,CAClI,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IAE9F,OAAO;QACL,IAAI,CAAC,MAAM;YACT,MAAM,OAAO,GAAG,aAAa,CAAC,MAA4C,CAAC,CAAC;YAC5E,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,OAAO,EAAE,CAAC,CAAC;YAC/F,MAAM,YAAY,GAAG,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9F,OAAO,GAAG,YAAY,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE;YAC9B,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,MAAM,EAAE,SAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/F,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;YAC3C,+EAA+E;YAC/E,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC;YACrE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;YAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC;gBAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;YAC1H,IAAI,MAA+B,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;YACrG,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACtC,CAAC;YACD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,KAAK,IAAK,MAAM,CAAC,GAAc,GAAG,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;YACvH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAwC,EAAE,CAAC;QACxE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client-events/builtin.d.ts

@@ -0,0 +1,30 @@
+import { type ClientEvent } from './chain.js';
+import type { RoomTokenSigner } from '../rooms/room-token.js';
+import type { OUIResultStore } from '../oui/results.js';
+import type { RelayRule, RoomPolicy } from '../types.js';
+import { type DeclaredEvents } from '../events/declared.js';
+export declare const MAX_RELAY_ROOMS = 5;
+export interface BuiltinClientEventDeps {
+    roomPolicy: RoomPolicy;
+    roomTokens: RoomTokenSigner;
+    relay: Readonly<Record<string, RelayRule>>;
+    /** The product's event declarations, when given: a relayed event is held to its declaration. */
+    declared: DeclaredEvents | null;
+    /** Resolved on use: the store exists once Redis is connected. */
+    results: () => OUIResultStore;
+}
+interface RelayPayload {
+    event: string;
+    data: unknown;
+    rooms: string[];
+}
+/**
+ * Why a relay is refused, or null when it is allowed: only an allow-listed
+ * event, with valid data, into rooms of its kind that this socket has joined
+ * (joining is where access to the resource is checked). With declarations,
+ * the event's declaration decides its rooms and data as well as the rule.
+ */
+export declare function relayRefusal(relay: Readonly<Record<string, RelayRule>>, socketRooms: ReadonlySet<string>, payload: RelayPayload, declared?: DeclaredEvents | null): string | null;
+export declare function createBuiltinClientEvents(deps: BuiltinClientEventDeps): ClientEvent[];
+export {};
+//# sourceMappingURL=builtin.d.ts.map

package/dist/client-events/builtin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin.d.ts","sourceRoot":"","sources":["../../src/client-events/builtin.ts"],"names":[],"mappings":"AAOA,OAAO,EAAqB,KAAK,WAAW,EAA2B,MAAM,YAAY,CAAC;AAE1F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAI7E,eAAO,MAAM,eAAe,IAAI,CAAC;AAEjC,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,UAAU,CAAC;IACvB,UAAU,EAAE,eAAe,CAAC;IAC5B,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3C,gGAAgG;IAChG,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,iEAAiE;IACjE,OAAO,EAAE,MAAM,cAAc,CAAC;CAC/B;AAUD,UAAU,YAAY;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAC1C,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,OAAO,EAAE,YAAY,EACrB,QAAQ,GAAE,cAAc,GAAG,IAAW,GACrC,MAAM,GAAG,IAAI,CAgBf;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,sBAAsB,GAAG,WAAW,EAAE,CAuHrF"}

package/dist/client-events/builtin.js

@@ -0,0 +1,161 @@
+/**
+ * The client events every realtime server accepts: joining and leaving rooms,
+ * relaying an allow-listed event, and answering a UI action (ADR-0209). A
+ * product declares its own events beside these (`config.clientEvents`).
+ */
+import Joi from 'joi';
+import { defineClientEvent } from './chain.js';
+import { joinRefusal } from '../rooms/join.js';
+import { OUI_WIRE } from '@ouispec/agent-events';
+import { declaredRefusal } from '../events/declared.js';
+// A client re-sends every room it holds on reconnect, in one subscribe.
+const MAX_ROOMS = 100;
+export const MAX_RELAY_ROOMS = 5;
+function normalizeSubscribe(payload) {
+    if (typeof payload === 'string')
+        return { rooms: [payload], tokens: {} };
+    if (Array.isArray(payload))
+        return { rooms: payload, tokens: {} };
+    return { rooms: Array.isArray(payload.rooms) ? payload.rooms : [payload.rooms], tokens: payload.tokens ?? {} };
+}
+/**
+ * Why a relay is refused, or null when it is allowed: only an allow-listed
+ * event, with valid data, into rooms of its kind that this socket has joined
+ * (joining is where access to the resource is checked). With declarations,
+ * the event's declaration decides its rooms and data as well as the rule.
+ */
+export function relayRefusal(relay, socketRooms, payload, declared = null) {
+    const rule = relay[payload.event];
+    if (!rule)
+        return `event "${payload.event}" may not be relayed by a client`;
+    if (declared) {
+        const refusal = declaredRefusal(declared, payload.event, payload.data, payload.rooms, 'data');
+        if (refusal)
+            return refusal;
+    }
+    if (rule.data) {
+        const { error } = rule.data.validate(payload.data, { convert: false });
+        if (error)
+            return `invalid "${payload.event}" data: ${error.message}`;
+    }
+    for (const room of payload.rooms) {
+        if (rule.roomPrefix && !room.startsWith(`${rule.roomPrefix}:`))
+            return `"${payload.event}" may only go to ${rule.roomPrefix}: rooms`;
+        if (!socketRooms.has(room))
+            return `not a member of ${room}`;
+    }
+    return null;
+}
+export function createBuiltinClientEvents(deps) {
+    const { roomPolicy, roomTokens, relay } = deps;
+    const room = Joi.string()
+        .max(200)
+        .custom((value, helpers) => (roomPolicy.isValidRoom(value) ? value : helpers.error('any.invalid')));
+    // ─── subscribe ─────────────────────────────────────────────────────────────
+    // The bare forms (`'room'`, `['room']`) and the token-bearing form
+    // (`{ rooms, tokens }`). Each room is judged on its own, so one refused room
+    // does not refuse the others; the ack names each.
+    const subscribe = defineClientEvent({
+        name: 'subscribe',
+        schema: Joi.alternatives().try(room.required(), Joi.array().items(room.required()).min(1).max(MAX_ROOMS), Joi.object({
+            rooms: Joi.alternatives().try(room.required(), Joi.array().items(room.required()).min(1).max(MAX_ROOMS)).required(),
+            tokens: Joi.object().pattern(room, Joi.string().max(2048)).default({}),
+        })),
+        maxBytes: 64 * 1024,
+        rate: { perSecond: 10, burst: 40 },
+        handle: ({ socket, user, logger }, payload, ack) => {
+            const { rooms, tokens } = normalizeSubscribe(payload);
+            const joined = [];
+            const denied = [];
+            const reasons = {};
+            for (const r of rooms) {
+                const refusal = joinRefusal(roomPolicy, roomTokens, r, user, tokens[r]);
+                if (refusal) {
+                    denied.push(r);
+                    reasons[r] = refusal;
+                }
+                else {
+                    socket.join(r);
+                    joined.push(r);
+                }
+            }
+            if (denied.length > 0)
+                logger.warn({ socketId: socket.id, userId: user.userId, denied: reasons }, 'Room subscription denied');
+            if (joined.length > 0)
+                logger.info({ socketId: socket.id, userId: user.userId, joined }, 'Subscribed to rooms');
+            ack?.({ ok: denied.length === 0, joined, denied: denied.length > 0 ? denied : undefined });
+        },
+    });
+    // ─── unsubscribe ───────────────────────────────────────────────────────────
+    const unsubscribe = defineClientEvent({
+        name: 'unsubscribe',
+        schema: Joi.alternatives().try(room.required(), Joi.array().items(room.required()).min(1).max(MAX_ROOMS)),
+        maxBytes: 16 * 1024,
+        rate: { perSecond: 10, burst: 40 },
+        handle: ({ socket, user, logger }, payload, ack) => {
+            const rooms = Array.isArray(payload) ? payload : [payload];
+            // The rooms a socket is placed in by its identity cannot be left.
+            const fixed = new Set(roomPolicy.identityRooms(user));
+            for (const r of rooms)
+                if (!fixed.has(r))
+                    socket.leave(r);
+            logger.info({ socketId: socket.id, rooms }, 'Unsubscribed from rooms');
+            ack?.({ ok: true });
+        },
+    });
+    // ─── relay ─────────────────────────────────────────────────────────────────
+    const relayEvent = defineClientEvent({
+        name: 'relay',
+        schema: Joi.object({
+            event: Joi.string().max(100).required(),
+            data: Joi.any(),
+            rooms: Joi.array().items(room.required()).min(1).max(MAX_RELAY_ROOMS).required(),
+        }),
+        maxBytes: 8 * 1024,
+        rate: { perSecond: 5, burst: 20 },
+        authorize: ({ socket }, payload) => {
+            const refusal = relayRefusal(relay, socket.rooms, payload, deps.declared);
+            return refusal ? { ok: false, reason: refusal } : { ok: true };
+        },
+        handle: ({ io, socket, user, logger }, payload, ack) => {
+            // To every member, the sender included: a tab updates its own view from
+            // the relayed event, as every other tab does.
+            io.to(payload.rooms).emit(payload.event, payload.data);
+            logger.debug({ socketId: socket.id, userId: user.userId, event: payload.event, rooms: payload.rooms }, 'Relayed event');
+            ack?.({ ok: true });
+        },
+    });
+    // ─── OUI action result (ADR-0209) ──────────────────────────────────────────
+    const ouiActionResult = defineClientEvent({
+        name: OUI_WIRE.result,
+        schema: Joi.object({
+            requestId: Joi.string().max(200).required(),
+            success: Joi.boolean().required(),
+        }).unknown(true),
+        maxBytes: 512 * 1024,
+        rate: { perSecond: 20, burst: 60 },
+        // Scoped by construction: the answer is kept under this socket's user, and
+        // the worker only ever collects answers for the turn's own user.
+        //
+        // Acknowledged either way (oui-spec §7.3.6): a refusal — too large,
+        // invalid, over the rate — is acknowledged by the chain with its reason, so
+        // the tab sends the answer again trimmed instead of the worker waiting out
+        // its deadline for an answer that was dropped.
+        handle: async ({ socket, user, logger }, result, ack) => {
+            const kept = await deps.results().store(user.userId, result);
+            if (kept) {
+                logger.info({
+                    socketId: socket.id,
+                    userId: user.userId,
+                    requestId: result.requestId,
+                    success: result.success,
+                    interim: result.interim ?? false,
+                    ...(result.delivery ? { trimmed: result.delivery.omitted, refusedBecause: result.delivery.reason } : {}),
+                }, 'OUI result received');
+            }
+            ack?.({ ok: true, kept });
+        },
+    });
+    return [subscribe, unsubscribe, relayEvent, ouiActionResult];
+}
+//# sourceMappingURL=builtin.js.map

package/dist/client-events/builtin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin.js","sourceRoot":"","sources":["../../src/client-events/builtin.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,OAAO,EAAE,iBAAiB,EAA6C,MAAM,YAAY,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAuB,MAAM,uBAAuB,CAAC;AAE7E,wEAAwE;AACxE,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAcjC,SAAS,kBAAkB,CAAC,OAAyB;IACnD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AACjH,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,KAA0C,EAC1C,WAAgC,EAChC,OAAqB,EACrB,WAAkC,IAAI;IAEtC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,UAAU,OAAO,CAAC,KAAK,kCAAkC,CAAC;IAC5E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC9F,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,KAAK;YAAE,OAAO,YAAY,OAAO,CAAC,KAAK,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC;YAAE,OAAO,IAAI,OAAO,CAAC,KAAK,oBAAoB,IAAI,CAAC,UAAU,SAAS,CAAC;QACrI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,mBAAmB,IAAI,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAA4B;IACpE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAE/C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE;SACtB,GAAG,CAAC,GAAG,CAAC;SACR,MAAM,CAAC,CAAC,KAAa,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAE9G,8EAA8E;IAC9E,mEAAmE;IACnE,6EAA6E;IAC7E,kDAAkD;IAClD,MAAM,SAAS,GAAG,iBAAiB,CAAmB;QACpD,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,CAC5B,IAAI,CAAC,QAAQ,EAAE,EACf,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EACxD,GAAG,CAAC,MAAM,CAAC;YACT,KAAK,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;YACnH,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACvE,CAAC,CACH;QACD,QAAQ,EAAE,EAAE,GAAG,IAAI;QACnB,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YACjD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACtD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxE,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACf,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,0BAA0B,CAAC,CAAC;YAC9H,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAChH,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7F,CAAC;KACF,CAAC,CAAC;IAEH,8EAA8E;IAC9E,MAAM,WAAW,GAAG,iBAAiB,CAAoB;QACvD,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzG,QAAQ,EAAE,EAAE,GAAG,IAAI;QACnB,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC3D,kEAAkE;YAClE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YACtD,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,yBAAyB,CAAC,CAAC;YACvE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACtB,CAAC;KACF,CAAC,CAAC;IAEH,8EAA8E;IAC9E,MAAM,UAAU,GAAG,iBAAiB,CAAe;QACjD,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC;YACjB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;YACvC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE;YACf,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;SACjF,CAAC;QACF,QAAQ,EAAE,CAAC,GAAG,IAAI;QAClB,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,SAAS,EAAE,CAAC,EAAE,MAAM,EAAsB,EAAE,OAAO,EAAE,EAAE;YACrD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1E,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACjE,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YACrD,wEAAwE;YACxE,8CAA8C;YAC9C,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,eAAe,CAAC,CAAC;YACxH,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACtB,CAAC;KACF,CAAC,CAAC;IAEH,8EAA8E;IAC9E,MAAM,eAAe,GAAG,iBAAiB,CAAkB;QACzD,IAAI,EAAE,QAAQ,CAAC,MAAM;QACrB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC;YACjB,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;YAC3C,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SAClC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QAChB,QAAQ,EAAE,GAAG,GAAG,IAAI;QACpB,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClC,2EAA2E;QAC3E,iEAAiE;QACjE,EAAE;QACF,oEAAoE;QACpE,4EAA4E;QAC5E,2EAA2E;QAC3E,+CAA+C;QAC/C,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7D,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,CAAC,IAAI,CACT;oBACE,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;oBAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzG,EACD,qBAAqB,CACtB,CAAC;YACJ,CAAC;YACD,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;AAC/D,CAAC"}

package/dist/client-events/chain.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Client events: what a browser may send the server, declared and guarded.
+ *
+ * An HTTP API never runs a handler that is not declared: every route has a
+ * schema and a chain of middleware (authentication, account, permission) in
+ * front of it. A bare `socket.on(...)` has none of that, and trusts its
+ * payload. That is how a `relay` handler once sent whatever event a client
+ * named to whatever room it named, so any signed-in user could send
+ * `oui:dispatch` into another account's tabs (ADR-0227, W0).
+ *
+ * Every client event goes through one chain, the socket counterpart of a
+ * route module:
+ *
+ *   1. declared — an event with no definition is refused and logged;
+ *   2. rate limit — per socket, per event (token bucket);
+ *   3. size, then schema — bounded bytes of JSON, then the event's schema;
+ *   4. authorize — the definition's own rule, against the socket's verified
+ *      identity (never an identity the payload claims);
+ *   5. handle.
+ *
+ * Authentication happens once, at connection, through the product's
+ * `AuthAdapter`.
+ */
+import type { Server, Socket } from 'socket.io';
+import type { AuthResult, PayloadSchema } from '../types.js';
+import type { RealtimeLogger } from '../logger.js';
+export interface AuthenticatedSocket extends Socket {
+    data: {
+        user: AuthResult;
+    };
+}
+export interface ClientEventContext {
+    io: Server;
+    socket: AuthenticatedSocket;
+    user: AuthResult;
+    logger: RealtimeLogger;
+}
+export type Authorization = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+export type Ack = (response: unknown) => void;
+export interface ClientEventDefinition<P = unknown> {
+    /** The event name the client emits. */
+    name: string;
+    /** Validates the payload. Unknown keys should be refused. */
+    schema: PayloadSchema;
+    /** Largest payload accepted, in bytes of JSON. */
+    maxBytes: number;
+    /** Token bucket per socket: sustained events per second, and burst. */
+    rate: {
+        perSecond: number;
+        burst: number;
+    };
+    /** May this socket's user do this, with this payload? Omit only when the handler scopes itself to the user. */
+    authorize?: (ctx: ClientEventContext, payload: P) => Authorization;
+    /** What a refusal is answered with, when the client passed an ack. */
+    refusal?: (reason: string) => unknown;
+    handle: (ctx: ClientEventContext, payload: P, ack?: Ack) => void | Promise<void>;
+}
+/** A declared event, with its payload type sealed inside: what the connection handler attaches. */
+export interface ClientEvent {
+    readonly name: string;
+    /** The guarded socket.io listener for one socket. */
+    listener(ctx: ClientEventContext): (raw: unknown, ack?: unknown) => void;
+}
+/** Declares a client event; the generic keeps `schema`, `authorize` and `handle` in step. */
+export declare function defineClientEvent<P>(definition: ClientEventDefinition<P>): ClientEvent & {
+    definition: ClientEventDefinition<P>;
+};
+/** Refuses two declarations of one name: which one would run is otherwise an accident of order. */
+export declare function assertUniqueClientEvents(events: readonly ClientEvent[]): void;
+/**
+ * Attaches the declared events to a connected socket. Anything else the client
+ * sends is refused and logged, so a probe for an undeclared event is visible.
+ */
+export declare function registerClientEvents(io: Server, socket: AuthenticatedSocket, events: readonly ClientEvent[], logger: RealtimeLogger): void;
+//# sourceMappingURL=chain.d.ts.map

package/dist/client-events/chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../../src/client-events/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,WAAW,mBAAoB,SAAQ,MAAM;IACjD,IAAI,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,mBAAmB,CAAC;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;AAE9C,MAAM,WAAW,qBAAqB,CAAC,CAAC,GAAG,OAAO;IAChD,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,MAAM,EAAE,aAAa,CAAC;IACtB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,+GAA+G;IAC/G,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,KAAK,aAAa,CAAC;IACnE,sEAAsE;IACtE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,MAAM,EAAE,CAAC,GAAG,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClF;AAED,mGAAmG;AACnG,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,QAAQ,CAAC,GAAG,EAAE,kBAAkB,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;CAC1E;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC,GACnC,WAAW,GAAG;IAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAA;CAAE,CAExD;AAkED,mGAAmG;AACnG,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,IAAI,CAM7E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE,SAAS,WAAW,EAAE,EAC9B,MAAM,EAAE,cAAc,GACrB,IAAI,CAcN"}

package/dist/client-events/chain.js

@@ -0,0 +1,92 @@
+/** Declares a client event; the generic keeps `schema`, `authorize` and `handle` in step. */
+export function defineClientEvent(definition) {
+    return { name: definition.name, definition, listener: (ctx) => guard(ctx, definition) };
+}
+// ─── Rate limiting ───────────────────────────────────────────────────────────
+class TokenBucket {
+    perSecond;
+    burst;
+    tokens;
+    last = Date.now();
+    constructor(perSecond, burst) {
+        this.perSecond = perSecond;
+        this.burst = burst;
+        this.tokens = burst;
+    }
+    take() {
+        const now = Date.now();
+        this.tokens = Math.min(this.burst, this.tokens + ((now - this.last) / 1000) * this.perSecond);
+        this.last = now;
+        if (this.tokens < 1)
+            return false;
+        this.tokens -= 1;
+        return true;
+    }
+}
+// ─── The chain ───────────────────────────────────────────────────────────────
+function payloadBytes(payload) {
+    try {
+        return Buffer.byteLength(JSON.stringify(payload ?? null));
+    }
+    catch {
+        return Number.POSITIVE_INFINITY;
+    }
+}
+/** Runs one event through the chain and returns a handler socket.io can call. */
+function guard(ctx, definition) {
+    const bucket = new TokenBucket(definition.rate.perSecond, definition.rate.burst);
+    const { socket, user, logger } = ctx;
+    const refuse = (reason, ack) => {
+        logger.warn({ socketId: socket.id, userId: user.userId, accountId: user.accountId, event: definition.name, reason }, 'Client event refused');
+        ack?.(definition.refusal ? definition.refusal(reason) : { ok: false, error: reason });
+    };
+    return (raw, maybeAck) => {
+        const ack = typeof maybeAck === 'function' ? maybeAck : undefined;
+        if (!bucket.take())
+            return refuse('rate limit exceeded', ack);
+        if (payloadBytes(raw) > definition.maxBytes)
+            return refuse(`payload larger than ${definition.maxBytes} bytes`, ack);
+        const { value, error } = definition.schema.validate(raw, { abortEarly: true, convert: false });
+        if (error)
+            return refuse(`invalid payload: ${error.message}`, ack);
+        if (definition.authorize) {
+            const decision = definition.authorize(ctx, value);
+            if (!decision.ok)
+                return refuse(decision.reason, ack);
+        }
+        Promise.resolve(definition.handle(ctx, value, ack)).catch((err) => {
+            logger.error({ err, socketId: socket.id, userId: user.userId, event: definition.name }, 'Client event handler failed');
+            ack?.({ ok: false, error: 'internal error' });
+        });
+    };
+}
+/** Refuses two declarations of one name: which one would run is otherwise an accident of order. */
+export function assertUniqueClientEvents(events) {
+    const seen = new Set();
+    for (const event of events) {
+        if (seen.has(event.name))
+            throw new Error(`[agent-sdk-realtime] Client event "${event.name}" is declared twice`);
+        seen.add(event.name);
+    }
+}
+/**
+ * Attaches the declared events to a connected socket. Anything else the client
+ * sends is refused and logged, so a probe for an undeclared event is visible.
+ */
+export function registerClientEvents(io, socket, events, logger) {
+    assertUniqueClientEvents(events);
+    const ctx = { io, socket, user: socket.data.user, logger };
+    const declared = new Set(events.map((e) => e.name));
+    for (const event of events)
+        socket.on(event.name, event.listener(ctx));
+    let undeclaredLogged = 0;
+    socket.onAny((event) => {
+        if (declared.has(event))
+            return;
+        // Bounded per socket: a flood of junk must not become a flood of logs.
+        if (undeclaredLogged++ < 20) {
+            logger.warn({ socketId: socket.id, userId: ctx.user.userId, event }, 'Undeclared client event refused');
+        }
+    });
+}
+//# sourceMappingURL=chain.js.map

package/dist/client-events/chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.js","sourceRoot":"","sources":["../../src/client-events/chain.ts"],"names":[],"mappings":"AAiEA,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAC/B,UAAoC;IAEpC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,gFAAgF;AAEhF,MAAM,WAAW;IAII;IACA;IAJX,MAAM,CAAS;IACf,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC1B,YACmB,SAAiB,EACjB,KAAa;QADb,cAAS,GAAT,SAAS,CAAQ;QACjB,UAAK,GAAL,KAAK,CAAQ;QAE9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9F,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,gFAAgF;AAEhF,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAClC,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,KAAK,CAAI,GAAuB,EAAE,UAAoC;IAC7E,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACrC,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,GAAoB,EAAE,EAAE;QACtD,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EACvG,sBAAsB,CACvB,CAAC;QACF,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC;IAEF,OAAO,CAAC,GAAY,EAAE,QAAkB,EAAE,EAAE;QAC1C,MAAM,GAAG,GAAG,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAE,QAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;QAE3E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,uBAAuB,UAAU,CAAC,QAAQ,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEpH,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/F,IAAI,KAAK;YAAE,OAAO,MAAM,CAAC,oBAAoB,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAEnE,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,EAAE,KAAU,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,KAAU,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC9E,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,6BAA6B,CAAC,CAAC;YACvH,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,wBAAwB,CAAC,MAA8B;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,IAAI,qBAAqB,CAAC,CAAC;QACjH,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,EAAU,EACV,MAA2B,EAC3B,MAA8B,EAC9B,MAAsB;IAEtB,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,GAAG,GAAuB,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAC/E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAEvE,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,MAAM,CAAC,KAAK,CAAC,CAAC,KAAa,EAAE,EAAE;QAC7B,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QAChC,uEAAuE;QACvE,IAAI,gBAAgB,EAAE,GAAG,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,iCAAiC,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,4 @@
+import type { RealtimeServerConfig } from './types.js';
+/** Throws, naming every missing or malformed seam, unless the configuration is complete. */
+export declare function assertRealtimeServerConfig(config: Partial<RealtimeServerConfig>): asserts config is RealtimeServerConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAwCvD,4FAA4F;AAC5F,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,oBAAoB,CAwBxH"}

package/dist/config.js

@@ -0,0 +1,85 @@
+import { UndeclaredEventError } from '@ouispec/agent-events';
+import { MIN_ROOM_TOKEN_SECRET_LENGTH } from './rooms/room-token.js';
+import { MIN_APPROVAL_KEY_LENGTH } from './approvals/token.js';
+/**
+ * Every seam the server cannot run without, and what it is for. A missing
+ * one fails start-up with this text: a default here would silently run some
+ * other product's value (ADR-0227 §2.2).
+ */
+const REQUIRED = [
+    ['auth', (c) => typeof c.auth?.verify === 'function', "an AuthAdapter that verifies your users' tokens"],
+    [
+        'roomPolicy',
+        (c) => !!c.roomPolicy &&
+            ['isValidRoom', 'identityRooms', 'requiresToken', 'canJoin'].every((m) => typeof c.roomPolicy?.[m] === 'function'),
+        'a RoomPolicy (isValidRoom, identityRooms, requiresToken, canJoin)',
+    ],
+    ['internalApiKey', (c) => typeof c.internalApiKey === 'string' && c.internalApiKey.length > 0, 'the key that guards the internal endpoints'],
+    [
+        'roomTokens.secret',
+        (c) => typeof c.roomTokens?.secret === 'string' && c.roomTokens.secret.length >= MIN_ROOM_TOKEN_SECRET_LENGTH,
+        `the room-token signing secret, at least ${MIN_ROOM_TOKEN_SECRET_LENGTH} characters`,
+    ],
+    [
+        'approvals.signingKey',
+        (c) => typeof c.approvals?.signingKey === 'string' && c.approvals.signingKey.length >= MIN_APPROVAL_KEY_LENGTH,
+        `the approval-token signing key, at least ${MIN_APPROVAL_KEY_LENGTH} characters`,
+    ],
+    ['redis.host', (c) => typeof c.redis?.host === 'string' && c.redis.host.length > 0, 'where UI action results and room fan-out meet'],
+    ['redis.port', (c) => Number.isInteger(c.redis?.port) && (c.redis?.port ?? 0) > 0, 'the Redis port'],
+    ['redis.tls', (c) => typeof c.redis?.tls === 'boolean', 'whether Redis is reached over TLS'],
+    [
+        'corsOrigins',
+        (c) => Array.isArray(c.corsOrigins) && c.corsOrigins.length > 0 && c.corsOrigins.every((o) => typeof o === 'string' && o),
+        "the browser origins allowed to connect (['*'] only deliberately)",
+    ],
+    ['port', (c) => Number.isInteger(c.port) && (c.port ?? -1) >= 0, 'the port to listen on (0 for any free port)'],
+];
+/** Throws, naming every missing or malformed seam, unless the configuration is complete. */
+export function assertRealtimeServerConfig(config) {
+    const missing = REQUIRED.filter(([, ok]) => !ok(config ?? {})).map(([name, , what]) => `${name} (${what})`);
+    if (missing.length > 0) {
+        throw new Error(`[agent-sdk-realtime] Missing required configuration: ${missing.join('; ')}`);
+    }
+    if (config.internalApiKey === config.roomTokens?.secret) {
+        throw new Error('[agent-sdk-realtime] roomTokens.secret must not be the internalApiKey: they are separate secrets');
+    }
+    const { approvals, roomTokens, internalApiKey } = config;
+    if (approvals.signingKey === internalApiKey || approvals.signingKey === roomTokens.secret) {
+        throw new Error('[agent-sdk-realtime] approvals.signingKey must be neither the internalApiKey nor roomTokens.secret: they are separate secrets');
+    }
+    for (const [event, rule] of Object.entries(config.relay ?? {})) {
+        if (config.events) {
+            assertRelayable(config.events, event);
+            if (rule?.data !== undefined && typeof rule.data.validate !== 'function') {
+                throw new Error(`[agent-sdk-realtime] relay["${event}"].data must be a schema with validate()`);
+            }
+        }
+        else if (!rule?.roomPrefix || typeof rule.data?.validate !== 'function') {
+            throw new Error(`[agent-sdk-realtime] relay["${event}"] needs a roomPrefix and a data schema`);
+        }
+    }
+}
+/**
+ * A client may relay only a declared notice that goes to the product's own
+ * rooms. A completion or failure relayed by a tab would forge a job's end, a
+ * progress event its state, and a turn's events belong to the worker.
+ */
+function assertRelayable(events, name) {
+    let declared;
+    try {
+        declared = events.require(name, `relay["${name}"]`);
+    }
+    catch (err) {
+        if (err instanceof UndeclaredEventError)
+            throw new Error(err.message.replace('[agent-sdk-events]', '[agent-sdk-realtime]'), { cause: err });
+        throw err;
+    }
+    if (declared.role !== 'notice') {
+        throw new Error(`[agent-sdk-realtime] relay["${name}"]: a ${declared.role} event is sent only by the server; a client may relay only a notice`);
+    }
+    if (declared.rooms.some((r) => r.pattern === null)) {
+        throw new Error(`[agent-sdk-realtime] relay["${name}"]: it goes to a turn's room, which only the server sends to`);
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,QAAQ,GAAmF;IAC/F,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,EAAE,iDAAiD,CAAC;IACxG;QACE,YAAY;QACZ,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,CAAC,UAAU;YACb,CAAC,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,CAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC;QAC/H,mEAAmE;KACpE;IACD,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,4CAA4C,CAAC;IAC5I;QACE,mBAAmB;QACnB,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,IAAI,4BAA4B;QAC7G,2CAA2C,4BAA4B,aAAa;KACrF;IACD;QACE,sBAAsB;QACtB,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,IAAI,uBAAuB;QAC9G,4CAA4C,uBAAuB,aAAa;KACjF;IACD,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,+CAA+C,CAAC;IACpI,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACpG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,KAAK,SAAS,EAAE,mCAAmC,CAAC;IAC5F;QACE,aAAa;QACb,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC;QACzH,kEAAkE;KACnE;IACD,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,6CAA6C,CAAC;CAChH,CAAC;AAEF,4FAA4F;AAC5F,MAAM,UAAU,0BAA0B,CAAC,MAAqC;IAC9E,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,AAAD,EAAG,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC;IAC5G,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,wDAAwD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;IACtH,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,MAA8B,CAAC;IACjF,IAAI,SAAS,CAAC,UAAU,KAAK,cAAc,IAAI,SAAS,CAAC,UAAU,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CACb,+HAA+H,CAChI,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,0CAA0C,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,yCAAyC,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAmD,EAAE,IAAY;IACxF,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5I,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,SAAS,QAAQ,CAAC,IAAI,qEAAqE,CAC/H,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,8DAA8D,CAAC,CAAC;IACrH,CAAC;AACH,CAAC"}

package/dist/events/declared.d.ts

@@ -0,0 +1,18 @@
+/**
+ * What the server checks of a declared event, on emit and on relay: that it
+ * is declared, that its payload passes its schema, and that each room is one
+ * it is declared for. One reading of the declarations for both doors.
+ */
+import type { EventCatalog } from '@ouispec/agent-events';
+import { type PayloadValidator } from '@ouispec/agent-events/validate';
+export interface DeclaredEvents {
+    catalog: EventCatalog;
+    validator: PayloadValidator;
+}
+export declare function createDeclaredEvents(catalog: EventCatalog): DeclaredEvents;
+/**
+ * Why `data` may not be sent as `event` to `rooms`, or null when it may.
+ * `noun` names the data as the caller knows it: an emit's payload, a relay's data.
+ */
+export declare function declaredRefusal(events: DeclaredEvents, event: string, data: unknown, rooms: readonly string[], noun: 'payload' | 'data'): string | null;
+//# sourceMappingURL=declared.d.ts.map

package/dist/events/declared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"declared.d.ts","sourceRoot":"","sources":["../../src/events/declared.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAE/F,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,gBAAgB,CAAC;CAC7B;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,YAAY,GAAG,cAAc,CAE1E;AAUD;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,IAAI,EAAE,SAAS,GAAG,MAAM,GACvB,MAAM,GAAG,IAAI,CAYf"}