@series-inc/rundot-syncplay 5.23.0 → 5.24.0-beta.1

package/dist/cjs/deterministic-session.js

@@ -7,11 +7,13 @@ exports.runDeterministicSessionCoreFixture = runDeterministicSessionCoreFixture;
 exports.runDeterministicStructuredSessionInputFixture = runDeterministicStructuredSessionInputFixture;
 exports.runDeterministicSessionAuthorityFixture = runDeterministicSessionAuthorityFixture;
 exports.runDeterministicSessionLifecycleProtocolFixture = runDeterministicSessionLifecycleProtocolFixture;
+const runtime_support_js_1 = require("./runtime-support.js");
 const canonical_js_1 = require("./canonical.js");
 const commands_js_1 = require("./commands.js");
 const engine_runtime_js_1 = require("./engine-runtime.js");
 const random_js_1 = require("./random.js");
 function createDeterministicSessionCore(options) {
+    (0, runtime_support_js_1.assertSupportedJsRuntime)();
     assertPositiveInteger(options.players, 'players');
     if (options.reconnectGraceFrames !== undefined) {
         assertNonNegativeInteger(options.reconnectGraceFrames, 'reconnectGraceFrames');

package/dist/cjs/engine-complete.js

@@ -1276,10 +1276,7 @@ function physicsCategory(bodies, requestedFrames, executedFrames, enforceThresho
             && stack.settledDynamicBodies === stack.stackLayers,
         stackRollbackEquivalent: stack.rollbackEquivalent,
         stackAuthoringOrderStable: stack.stableUnderAuthoringOrderPermutation,
-        // Rigid-solver material response (impulse-based) — combine semantics unchanged
-        // (floor-average friction, max restitution); the bounce/friction velocity
-        // magnitudes come from the sequential-impulse solver, not the legacy pusher.
-        materialResponseCovered: materials.combinedFriction === 3
+        materialResponseCovered: Math.abs(materials.combinedFriction - 0.28284271) < 1e-6
             && materials.combinedRestitution === 7
             && materials.normalVelocityAfterBounce > 0
             && materials.tangentVelocityAfterFrictionY < 10

package/dist/cjs/engine-parity-matrix.js

@@ -623,30 +623,56 @@ const engineParityMatrixEntries = [
             'packages/syncplay/src/physics2d.ts',
             'packages/syncplay/src/physics3d.ts',
             'packages/syncplay/src/physics3d-solver.ts',
+            'packages/syncplay/src/physics3d-toi.ts',
             'packages/syncplay/src/physics3d-joints.ts',
+            'packages/syncplay/src/physics3d-mass.ts',
+            'packages/syncplay/src/physics3d-heightfield.ts',
             'packages/syncplay/tests/physics2d.test.ts',
             'packages/syncplay/tests/physics3d-solver.test.ts',
             'packages/syncplay/tests/physics3d-joints.test.ts',
             'packages/syncplay/tests/physics3d-ccd.test.ts',
+            'packages/syncplay/tests/physics3d-toi.test.ts',
+            'packages/syncplay/tests/physics3d-mass.test.ts',
+            'packages/syncplay/tests/physics3d-materials.test.ts',
+            'packages/syncplay/tests/physics3d-heightfield.test.ts',
+            'packages/syncplay/tests/physics3d-rotation-convention.test.ts',
+            'packages/syncplay/tests/physics3d-mesh-onesided.test.ts',
             'packages/syncplay/tests/engine-complete.test.ts',
             'packages/syncplay/src/physics3d-vehicle.ts',
             'packages/syncplay/tests/physics3d-vehicle.test.ts',
-            'warm-started sequential-impulse solver: stable stacking, tumbling, sleeping, axis locks, joints (ball/hinge/weld/rope/grab), speculative-contact CCD, compound colliders, orientation-aware queries',
+            'packages/syncplay/src/physics3d-stacking.ts',
+            'packages/syncplay/tests/physics3d-stacking.test.ts',
+            'packages/syncplay/src/physics3d-recipes.ts',
+            'packages/syncplay/tests/physics3d-recipes.test.ts',
+            'packages/syncplay/src/physics3d-hull.ts',
+            'packages/syncplay/tests/physics3d-hull.test.ts',
+            'TGS-Soft (sub-stepped soft-constraint) rigid solver: box3d-class stable stacking, tumbling, sleeping, axis locks, joints (ball/hinge/weld/rope/prismatic/spring/grab), opt-in TOI-bound CCD, compound colliders, orientation-aware queries',
+            'extreme-speed CCD (box3d model, src/physics3d-toi.ts): an opt-in ccd body whose per-tick motion exceeds half its smallest extent has its exact first time-of-impact found by GJK conservative advancement against convex shapes and culled heightfield cell triangles; it is advanced there and the impact resolved as a perfectly-inelastic collision with momentum transfer and a TOI position clamp. physics3d-ccd.test.ts and physics3d-heightfield.test.ts cover finite-at-vx60, heightfield-cliff no-tunnel, rollback, and permutation equivalence',
+            'stacking stability gated in CI: tower-15 (<1° tilt), 50:1 mass-ratio column, pyramid, kick-recovery, and a 20-layer stack all meet drift/penetration/up-alignment thresholds with rollback + authoring-order-permutation equivalence',
+            'convex-hull collision shape (4–16 verts): deterministic supporting-plane preprocessing, SAT+clip hull-vs-hull/box, closest-point hull-vs-sphere/capsule, support-sample hull-vs-static-mesh, exact ray/overlap/shape-cast queries; golden hull-pair battery pinned',
+            'cone-twist ball joint (swing cone + twist limits via fixed-point cosine) drives a 6-body ragdoll that settles kinetically and stays articulated; rigid-wheel vehicle recipe (sphere wheels + hinge motors) certified alongside the raycast controller',
             'builtin-rigid physics-cert lane passes all 4 determinism gates; contact/joint caches are checksummed rollback state',
-            'raycast-wheel vehicle controller (stepDeterministicVehicle3D): spring-damper suspension, friction-circle drive/steer/brake, fixed-point steering trig; certified via the physics-rigid-vehicle fixture, the builtin-rigid arena car, and a rollback-every-frame synctest scene',
-            'per-world static AABB-tree query index: raycast/overlap/shape-cast are O(log n + hits) with bit-identical results (oracle-tested; cert-lane checksums unchanged); batched applyDeterministicImpulses3D applies a frame of controller impulses in one canonical rebuild',
-            'pooled narrow-phase/constraint scratch (scalarized box face-clip over ping-pong clip slots, step-scoped constraint pool) pulled the 128-body pile impact-burst p99 from 2.06 ms to 1.54 ms (p50 0.85 → 0.72 ms, median-of-5); prismatic/breakable/collision-suppressed joints, a soft frequencyHz/dampingRatio spring joint, and per-body gravityScale round out the joint/body surface — joint breaks are sticky checksummed cache state',
+            'builtin-rigid@2 certifies true hull/compound inertia and center-of-mass integration, geometric-mean friction, rolling resistance, static heightfields with CCD/query parity, and active spherical motor/orientation-spring rows',
+            'raycast-wheel vehicle controller (stepDeterministicVehicle3D): spring-damper suspension, friction-circle drive/steer/brake, fixed-point steering trig, moving-ground reaction (slip relative to the contact body; equal-and-opposite reaction on dynamic ground)',
+            'per-world static AABB-tree query index: raycast/overlap/shape-cast are O(log n + hits) with bit-identical results; batched applyDeterministicImpulses3D applies a frame of controller impulses in one canonical rebuild',
+            'pooled narrow-phase/constraint scratch (scalarized box face-clip over ping-pong clip slots, step-scoped constraint pool); prismatic/breakable/collision-suppressed joints, a soft frequencyHz/dampingRatio spring joint (breakable/disable-collision), and per-body gravityScale — joint breaks are sticky checksummed cache state',
+            'kinematic bodies integrate their authored velocity (linear + angular) inside the solver, drive the dynamic bodies they touch through the contact relative-velocity term, absorb the equal-and-opposite reaction (zero inverse mass), and wake the sleeping piles they push; a kinematic mesh is therefore a moving platform / conveyor collider. A dynamic mesh is rejected at world creation',
+            'one-sided mesh and heightfield contacts resolve penetration for zero-radius shapes while rejecting genuine back-face approaches; a shallow solver-creep recovery band keeps boxes/hulls resting without ejecting bodies from below',
+            'compound colliders accept hull children (packages/syncplay/src/collider-cooking.ts): an offline V-HACD-shaped cooker voxelizes a concave triangle soup, splits it on the axis-aligned plane that best reduces concavity, and emits a compound of ≤16-vert convex hulls that the runtime validates with buildSolverHull. The cook is order-invariant and byte-reproducible (exact integer-lattice convex hull, lexicographic tie-breaks); no decomposition code runs in a simulation step',
         ],
         cliProofs: [
             'npm run lab:physics3d -- --bodies 128 --frames 1000 --no-fast-stress --json artifacts/reports/physics3d-no-fast.json',
+            'npm run lab:physics3d-stacks -- --json artifacts/reports/physics3d-stacks.json',
             'npm run certify:engine-complete -- --filter physics3d --players 128 --frames 5000 --no-fast-stress',
             'npm run lab:physics-cert -- --engine builtin-rigid --shape fixed-arena --players 4 --frames 600 --seed 7 --snapshot-every 8',
             'npm run coverage:package:physics-vehicle',
+            'npm run collider:validate -- <mesh.json> --json artifacts/reports/collider-validate.json',
         ],
         gaps: [
-            'Vehicles are raycast-wheel only (static ground, flat/axis-aligned contact normals); moving-ground reaction and rigid-wheel vehicles are tracked follow-ons.',
-            'Dynamic mesh-vs-mesh collision, convex-hull decomposition / visual collider import, and ragdolls-in-checksummed-state remain out of scope.',
-            'Cross-VM certification posture unchanged (V8↔V8 certified; WebKit nightly; Hermes documented gap).',
+            'Mesh-vs-mesh collision remains unsupported by design: a mesh collider is static or kinematic, and a dynamic concave body must be cooked to a compound of hulls (collider:cook).',
+            'Kinematic bodies resolve contacts discretely — a kinematic mesh driven faster than its own extent per tick can pass through a thin body (no CCD for kinematic; ccd is a dynamic-body opt-in).',
+            'Dynamic ccd sweeps box, sphere, capsule, hull, and heightfield targets; triangle-soup mesh and compound targets remain discrete-only.',
+            'Convex decomposition is offline only: the cooked hull set is conservative (it contains the source, inflated by up to one voxel of the chosen resolution) and hulls stay capped at 16 verts.',
         ],
         nextCliWork: [
             'Profile the remaining burst cost before further pooling; no known single lever.',
@@ -829,20 +855,26 @@ const engineParityMatrixEntries = [
         canCloseWithCli: true,
         currentEvidence: [
             'packages/syncplay/src/browser.ts',
+            'packages/syncplay/src/runtime-support.ts',
+            'packages/syncplay/tests/runtime-support.test.ts',
             'packages/sdk/src/syncplay/index.ts',
             'packages/sdk/src/syncplay/browser.ts',
             'packages/sdk/src/syncplay/node.ts',
             'packages/sdk/tests/deterministicMultiplayer.test.ts',
+            'cross-VM certification: Chromium (V8) AND WebKit (JavaScriptCore, the executable proxy for iOS WKWebView) are blocking gates on every engine PR (.github/workflows/ci-syncplay.yml cross-vm-browser). Each runs the replay proof, the number lab, and the 128-player/1000-frame engine-core numeric proof, and each must reproduce Node\'s checksums bit-for-bit; static:determinism requires a passing proof artifact per certified runtime, not just chromium',
+            'Hermes is an explicit non-goal with an enforced runtime guard: H5 games run in the platform WebView (V8 on Android, JavaScriptCore on iOS), never in React Native\'s VM, and no lane can execute Hermes — so createDeterministicSessionCore refuses to start there rather than emit checksums the authority server would silently reject (src/runtime-support.ts)',
         ],
         cliProofs: [
             'npm run lab:replay-verify-browser -- artifacts/replays/browser-proof-current.json --runtime chromium --json artifacts/certification/browser-replay-chromium-current.json',
+            'npm run lab:replay-verify-browser -- artifacts/replays/browser-proof-current.json --runtime webkit --json artifacts/certification/browser-replay-webkit-current.json',
+            'npm run lab:engine-core-browser -- --runtime webkit --json artifacts/certification/engine-core-numeric-webkit-current.json',
             'cd packages/sdk && npm test -- deterministicMultiplayer.test.ts --runInBand && npm run build:sdk',
         ],
         gaps: [
-            'Browser proof artifacts are not always present and are not yet mandatory for every parity report.',
+            'Android WebView is proven only by proxy (Chromium/V8 on Linux); the on-device APK replay harness stays a manual per-release step.',
         ],
         nextCliWork: [
-            'Require Chromium browser replay and SDK test-app proof artifacts in static:determinism certification mode.',
+            'Automate the Android WebView APK replay harness so the on-device proof stops being manual.',
         ],
         referenceDocs: [
             'external-deterministic-engine-reference:manual/replay',

package/dist/cjs/engine-parity.js

@@ -767,7 +767,7 @@ function runPhysicsCategory(config) {
             && physics3DQueries.overlapCovered
             && physics3DQueries.shapeCastCovered,
         physics3DMaterialResponse: physics3DMaterials.rollbackEquivalent
-            && physics3DMaterials.combinedFriction === 3
+            && Math.abs(physics3DMaterials.combinedFriction - 0.28284271) < 1e-6
             && physics3DMaterials.combinedRestitution === 7
             && physics3DMaterials.normalVelocityAfterBounce < 0,
         physics3DDetailedQueriesAndContacts: physics3DDetails.rollbackEquivalent
@@ -2531,7 +2531,7 @@ function runReplayWorkload128(frames, seed) {
         mismatches: verification.mismatches,
         finalChecksum: verification.finalChecksum,
         replayBytes: JSON.stringify(replay).length,
-        snapshotBytes: session.getSnapshot(session.currentFrame).stateBytes.byteLength,
+        snapshotBytes: session.getSnapshotBytes(session.currentFrame).byteLength,
     };
 }
 function runSecurityHostileClientCategory(config) {

package/dist/cjs/index.js

@@ -4,8 +4,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.createDeterministicCommandTimelineSnapshot = exports.createDeterministicCommandTimeline = exports.assertDeterministicPayloadFields = exports.translateAabb = exports.sortAabbsByStableId = exports.segmentsIntersect = exports.segmentSegmentDistance = exports.segmentPointDistance = exports.pointOnSegment = exports.orientation = exports.fixedVec2 = exports.fixedCircle = exports.fixedAabb = exports.closestPointOnSegment = exports.circleIntersectsAabb = exports.circleIntersects = exports.aabbIntersects = exports.aabbContainsPoint = exports.stableSortedKeys = exports.stableEntries = exports.deterministicShuffle = exports.createStableIndexedMap = exports.encodeUtf8 = exports.defaultChecksum = exports.decodeUtf8 = exports.decodeCanonicalValue = exports.cloneCanonical = exports.canonicalStringify = exports.canonicalize = exports.tickDeterministicHfsm = exports.tickDeterministicBehaviorTreeWithMemory = exports.tickDeterministicBehaviorTree = exports.selectDeterministicUtility = exports.runDeterministicBotSimulation = exports.getBlackboardValue = exports.createDeterministicBotBlackboard = exports.cookDeterministicBotAsset = exports.traceDeterministicBotDocument = exports.summarizeDeterministicBotDocumentTraceCoverage = exports.summarizeDeterministicBotDocumentTraceCounterDelta = exports.compileDeterministicBotDocument = exports.createDeterministicAuthorityRoom = exports.stableAssetCookJson = exports.materializePrototypeEntities = exports.cookDeterministicAssets = exports.assertAssetManifestMatches = exports.stepDeterministicAnimation = exports.reconstructDeterministicAnimationEvents = exports.createDeterministicAnimationRuntimeState = exports.cookDeterministicAnimation = void 0;
 exports.createDeterministicLocalAuthorityCorrectionEnvelope = exports.createDeterministicLocalAuthorityCommandBundleEnvelope = exports.createDeterministicLocalAuthorityAckEnvelope = exports.applyDeterministicLocalAuthorityInputBundleEnvelope = exports.applyDeterministicLocalAuthorityCommandBundleEnvelope = exports.createDeterministicLocalAuthorityRuntime = exports.validateDeterministicLagCompensatedShot3D = exports.validateDeterministicAuthoritativeLagCompensatedShot3D = exports.rewindDeterministicLagCompensatedTargets3D = exports.createDeterministicLagCompensation3DHistory = exports.buildDeterministicLagCompensatedHitboxProxies3D = exports.sortDeterministicInputTimelineFlags = exports.evaluateDeterministicInputTimelineResult = exports.accumulateDeterministicInputTimelineState = exports.createInputAuthority = exports.filterDeterministicEventsForPlayer = exports.createDeterministicEventTimeline = exports.SyncplayError = exports.validateDeterministicFrameSystemsStateless = exports.runDeterministicFrameRuntimeMutationCorpus = exports.isDeterministicFrameHeapStaleHandleError = exports.generateDeterministicFrameRuntimeSource = exports.createDeterministicSparseSetFrameRuntime = exports.createDeterministicSlotMap = exports.createDeterministicFrameRuntimeAccessors = exports.createDeterministicFrameRuntime = exports.createDeterministicBitset = exports.compileDeterministicDslRuntimeDescriptor = exports.assertDeterministicFrameSystemsStateless = exports.assertDeterministicFrameHeapStaleHandleError = exports.stableDeterministicEngineCompleteJson = exports.runDeterministicEngineCompleteSuite = exports.engineCompleteExecutionProofHash = exports.createDeterministicEventEffectsAdapter = exports.createEcsLiteWorld = exports.verifyDeterministicSessionRuntimeReplay = exports.createDeterministicSessionReplayBundle = exports.createDeterministicSessionCore = exports.stepTopDownBody = exports.stepKccLiteBody = exports.quantizeFpsAim = exports.detectVerticalCcdHit = exports.cookStaticColliders = exports.combineDeterministicPhysicsMaterial = exports.verifyDeterministicConfigBundle = exports.summarizeDeterministicConfigBundleFailureReasons = exports.evaluateDeterministicConfigBundleParityResult = exports.cookDeterministicConfigBundle = exports.evaluateDeterministicCommandTimelineMigrationResult = exports.deterministicPayloadMatchesFields = void 0;
 exports.queryDeterministicPhysicsShapeOverlap2D = exports.queryDeterministicPhysicsAabb2D = exports.nearestDeterministicPhysicsHit2D = exports.createDeterministicPhysicsWorld2D = exports.circleCastDeterministicPhysics2D = exports.createOfflineSession = exports.valueNoise2D = exports.valueNoise1D = exports.hashUint32 = exports.hash2 = exports.fbm2D = exports.createNetworkedSyncplayClient = exports.stepDeterministicNavmeshOffMeshTraversal = exports.stepDeterministicNavmeshAgents = exports.smoothDeterministicNavmeshPath = exports.runDeterministicNavmeshStress = exports.locateDeterministicNavmeshPolygon = exports.findDeterministicNavmeshPointPath = exports.findDeterministicNavmeshPath = exports.cookImportedDeterministicNavmesh = exports.cookDeterministicNavmesh = exports.stepDeterministicNavigationAgents = exports.smoothDeterministicPath = exports.findDeterministicPath = exports.createDeterministicFlowField = exports.cookTilemapNavigationGraph = exports.cookDeterministicNavigationGraph = exports.applyDeterministicReciprocalAvoidance = exports.stepDeterministicKcc3D = exports.stepDeterministicCarry3D = exports.validateDeterministicLagCompensatedHit = exports.stepDeterministicTopDownMover = exports.stepDeterministicKcc2D = exports.stepDeterministicFpsAim = exports.runDeterministicMovementSimulation = exports.runDeterministicMovementCrowdSimulation = exports.rewindDeterministicTargets = exports.createDeterministicMath = exports.encodeDeterministicLocalAuthorityWireEnvelope = exports.deterministicLocalAuthorityWireProtocol = exports.decodeDeterministicLocalAuthorityWireEnvelope = exports.createDeterministicLocalAuthorityWireReceiver = exports.createDeterministicLocalAuthorityWireAuth = exports.createDeterministicLocalAuthoritySnapshotTransfer = exports.createDeterministicLocalAuthoritySnapshotRequestEnvelope = exports.createDeterministicLocalAuthoritySnapshotOfferEnvelope = exports.createDeterministicLocalAuthoritySnapshotEnvelope = exports.createDeterministicLocalAuthoritySnapshotCompleteEnvelope = exports.createDeterministicLocalAuthoritySnapshotChunkEnvelope = exports.createDeterministicLocalAuthorityInputBundleEnvelope = void 0;
-exports.withRuntimeDeterminismGuards = exports.createDeterministicRollbackHistory = exports.stableReportJson = exports.stableReportDiffJson = exports.renderDeterministicReportHtml = exports.diffDeterministicReports = exports.createProtocolRollbackReport = exports.verifyScoredReplay = exports.stableFrameDumpJson = exports.stableFrameDiffJson = exports.inspectReplayFrameWithDescriptor = exports.inspectReplayFrame = exports.explainReplayChecksum = exports.diffReplayFrames = exports.verifyReplayScoreAgainstTrustedRuntime = exports.verifyDeterministicSelfContainedFrameRuntimeReplayBundle = exports.verifyDeterministicReplayBundle = exports.verifyDeterministicFrameRuntimeReplayBundle = exports.sliceDeterministicReplayBundle = exports.minimizeDeterministicReplayDesyncBundle = exports.minimizeDeterministicReplayDesync = exports.createDeterministicReplayRuntimeManifest = exports.createDeterministicReplayDebugTables = exports.createDeterministicReplayBundle = exports.verifyReplayWithDescriptor = exports.verifyReplay = exports.DeterministicRandom = exports.interpolateDeterministicRenderVec2 = exports.interpolateDeterministicRenderNumber = exports.createDeterministicR3fRenderAdapter = exports.createDeterministicR3fDebugOverlay = exports.stepDeterministicVehicle3D = exports.stepDeterministicPhysicsWorld3D = exports.shapeCastDeterministicPhysics3DDetailed = exports.shapeCastDeterministicPhysics3D = exports.setDeterministicBodyVelocity3D = exports.runDeterministicPhysics3DStress = exports.raycastDeterministicPhysics3DDetailed = exports.raycastDeterministicPhysics3D = exports.overlapDeterministicPhysics3D = exports.deterministicPhysicsCallback3D = exports.deterministicPhysicsBodyById3D = exports.deriveInverseInertia = exports.createDeterministicPhysicsWorld3D = exports.contactDetailsDeterministicPhysics3D = exports.applyDeterministicImpulses3D = exports.applyDeterministicImpulse3D = exports.stepDeterministicPhysicsWorld2D = exports.raycastDeterministicPhysics2D = exports.raycastAllDeterministicPhysics2D = void 0;
-exports.tickCooldown = exports.scheduleFrameEvent = exports.popDueFrameEvents = exports.millisecondsToFrames = exports.framesToMilliseconds = exports.createCooldown = exports.summarizeDeterministicLifecycleCounters = exports.createDeterministicLifecycleRunner = exports.createDeterministicSparseSet = exports.createDeterministicSignalBus = exports.encodeDeterministicSessionMessage = exports.deterministicSessionWireVersion = exports.decodeDeterministicSessionMessage = exports.encodeDeterministicStateSnapshot = exports.deterministicRoomDescriptorHash = exports.DEFAULT_SNAPSHOT_CHUNK_SIZE = exports.DEFAULT_MAX_SNAPSHOT_BYTES = exports.decodeDeterministicStateSnapshot = exports.createSnapshotTransferFromBytes = exports.createSnapshotTransferCollector = exports.bytesToBase64 = exports.base64ToBytes = exports.createSyncplayOfflineRuntime = exports.stableDeterministicDslSchemaJson = exports.parseDeterministicSchemaDsl = exports.deterministicDslMaxPlayers = exports.createDeterministicBinarySerializer = exports.proveSchemaBinaryRoundTrip = exports.generateSchemaTypes = exports.generateSchemaBinarySource = exports.createDeterministicDescriptorBinarySchema = exports.createSchemaArtifacts = exports.stableDescriptorId = exports.defineSyncplayGame = void 0;
+exports.diffDeterministicReports = exports.createProtocolRollbackReport = exports.verifyScoredReplay = exports.stableFrameDumpJson = exports.stableFrameDiffJson = exports.inspectReplayFrameWithDescriptor = exports.inspectReplayFrame = exports.explainReplayChecksum = exports.diffReplayFrames = exports.verifyReplayScoreAgainstTrustedRuntime = exports.verifyDeterministicSelfContainedFrameRuntimeReplayBundle = exports.verifyDeterministicReplayBundle = exports.verifyDeterministicFrameRuntimeReplayBundle = exports.sliceDeterministicReplayBundle = exports.minimizeDeterministicReplayDesyncBundle = exports.minimizeDeterministicReplayDesync = exports.createDeterministicReplayRuntimeManifest = exports.createDeterministicReplayDebugTables = exports.createDeterministicReplayBundle = exports.verifyReplayWithDescriptor = exports.verifyReplay = exports.DeterministicRandom = exports.interpolateDeterministicRenderVec2 = exports.interpolateDeterministicRenderNumber = exports.createDeterministicR3fRenderAdapter = exports.createDeterministicR3fDebugOverlay = exports.stepDeterministicVehicle3D = exports.runDeterministicTower3DScenario = exports.runDeterministicStackingSuite3D = exports.runDeterministicPyramid3DScenario = exports.runDeterministicMassRatio3DScenario = exports.runDeterministicKickRecovery3DScenario = exports.stepDeterministicPhysicsWorld3D = exports.shapeCastDeterministicPhysics3DDetailed = exports.shapeCastDeterministicPhysics3D = exports.setDeterministicBodyVelocity3D = exports.runDeterministicPhysics3DStress = exports.raycastDeterministicPhysics3DDetailed = exports.raycastDeterministicPhysics3D = exports.overlapDeterministicPhysics3D = exports.deterministicPhysicsCallback3D = exports.deterministicPhysicsBodyById3D = exports.deriveInverseInertia = exports.createDeterministicPhysicsWorld3D = exports.contactDetailsDeterministicPhysics3D = exports.applyDeterministicImpulses3D = exports.applyDeterministicImpulse3D = exports.stepDeterministicPhysicsWorld2D = exports.raycastDeterministicPhysics2D = exports.raycastAllDeterministicPhysics2D = void 0;
+exports.createSyncplaySecretsClient = exports.createSyncplaySecretEventReader = exports.createSyncplaySecretAuthority = exports.verifySyncplaySignedReceipt = exports.createBrowserSyncplaySecretCrypto = exports.syncplaySecretProtocol = exports.isSyncplaySecretCommand = exports.decodeSyncplaySecretPrivateMessage = exports.validateSyncplaySecretSystemsConfig = exports.syncplaySecretLimits = exports.syncplaySecretConfigHash = exports.tickCooldown = exports.scheduleFrameEvent = exports.popDueFrameEvents = exports.millisecondsToFrames = exports.framesToMilliseconds = exports.createCooldown = exports.summarizeDeterministicLifecycleCounters = exports.createDeterministicLifecycleRunner = exports.createDeterministicSparseSet = exports.createDeterministicSignalBus = exports.encodeDeterministicSessionMessage = exports.deterministicSessionWireVersion = exports.decodeDeterministicSessionMessage = exports.encodeDeterministicStateSnapshot = exports.deterministicRoomDescriptorHash = exports.DEFAULT_SNAPSHOT_CHUNK_SIZE = exports.DEFAULT_MAX_SNAPSHOT_BYTES = exports.decodeDeterministicStateSnapshot = exports.createSnapshotTransferFromBytes = exports.createSnapshotTransferCollector = exports.bytesToBase64 = exports.base64ToBytes = exports.createSyncplayOfflineRuntime = exports.stableDeterministicDslSchemaJson = exports.parseDeterministicSchemaDsl = exports.deterministicDslMaxPlayers = exports.createDeterministicBinarySerializer = exports.proveSchemaBinaryRoundTrip = exports.generateSchemaTypes = exports.generateSchemaBinarySource = exports.createDeterministicDescriptorBinarySchema = exports.createSchemaArtifacts = exports.stableDescriptorId = exports.defineSyncplayGame = exports.withRuntimeDeterminismGuards = exports.createDeterministicRollbackHistory = exports.stableReportJson = exports.stableReportDiffJson = exports.renderDeterministicReportHtml = void 0;
 var animation_js_1 = require("./animation.js");
 Object.defineProperty(exports, "cookDeterministicAnimation", { enumerable: true, get: function () { return animation_js_1.cookDeterministicAnimation; } });
 Object.defineProperty(exports, "createDeterministicAnimationRuntimeState", { enumerable: true, get: function () { return animation_js_1.createDeterministicAnimationRuntimeState; } });
@@ -207,6 +207,12 @@ Object.defineProperty(exports, "setDeterministicBodyVelocity3D", { enumerable: t
 Object.defineProperty(exports, "shapeCastDeterministicPhysics3D", { enumerable: true, get: function () { return physics3d_js_1.shapeCastDeterministicPhysics3D; } });
 Object.defineProperty(exports, "shapeCastDeterministicPhysics3DDetailed", { enumerable: true, get: function () { return physics3d_js_1.shapeCastDeterministicPhysics3DDetailed; } });
 Object.defineProperty(exports, "stepDeterministicPhysicsWorld3D", { enumerable: true, get: function () { return physics3d_js_1.stepDeterministicPhysicsWorld3D; } });
+var physics3d_stacking_js_1 = require("./physics3d-stacking.js");
+Object.defineProperty(exports, "runDeterministicKickRecovery3DScenario", { enumerable: true, get: function () { return physics3d_stacking_js_1.runDeterministicKickRecovery3DScenario; } });
+Object.defineProperty(exports, "runDeterministicMassRatio3DScenario", { enumerable: true, get: function () { return physics3d_stacking_js_1.runDeterministicMassRatio3DScenario; } });
+Object.defineProperty(exports, "runDeterministicPyramid3DScenario", { enumerable: true, get: function () { return physics3d_stacking_js_1.runDeterministicPyramid3DScenario; } });
+Object.defineProperty(exports, "runDeterministicStackingSuite3D", { enumerable: true, get: function () { return physics3d_stacking_js_1.runDeterministicStackingSuite3D; } });
+Object.defineProperty(exports, "runDeterministicTower3DScenario", { enumerable: true, get: function () { return physics3d_stacking_js_1.runDeterministicTower3DScenario; } });
 var physics3d_vehicle_js_1 = require("./physics3d-vehicle.js");
 Object.defineProperty(exports, "stepDeterministicVehicle3D", { enumerable: true, get: function () { return physics3d_vehicle_js_1.stepDeterministicVehicle3D; } });
 var r3f_render_adapter_js_1 = require("./r3f-render-adapter.js");
@@ -294,3 +300,19 @@ Object.defineProperty(exports, "millisecondsToFrames", { enumerable: true, get:
 Object.defineProperty(exports, "popDueFrameEvents", { enumerable: true, get: function () { return timers_js_1.popDueFrameEvents; } });
 Object.defineProperty(exports, "scheduleFrameEvent", { enumerable: true, get: function () { return timers_js_1.scheduleFrameEvent; } });
 Object.defineProperty(exports, "tickCooldown", { enumerable: true, get: function () { return timers_js_1.tickCooldown; } });
+var secret_config_js_1 = require("./secret-config.js");
+Object.defineProperty(exports, "syncplaySecretConfigHash", { enumerable: true, get: function () { return secret_config_js_1.syncplaySecretConfigHash; } });
+Object.defineProperty(exports, "syncplaySecretLimits", { enumerable: true, get: function () { return secret_config_js_1.syncplaySecretLimits; } });
+Object.defineProperty(exports, "validateSyncplaySecretSystemsConfig", { enumerable: true, get: function () { return secret_config_js_1.validateSyncplaySecretSystemsConfig; } });
+var secret_protocol_js_1 = require("./secret-protocol.js");
+Object.defineProperty(exports, "decodeSyncplaySecretPrivateMessage", { enumerable: true, get: function () { return secret_protocol_js_1.decodeSyncplaySecretPrivateMessage; } });
+Object.defineProperty(exports, "isSyncplaySecretCommand", { enumerable: true, get: function () { return secret_protocol_js_1.isSyncplaySecretCommand; } });
+Object.defineProperty(exports, "syncplaySecretProtocol", { enumerable: true, get: function () { return secret_protocol_js_1.syncplaySecretProtocol; } });
+var secret_crypto_js_1 = require("./secret-crypto.js");
+Object.defineProperty(exports, "createBrowserSyncplaySecretCrypto", { enumerable: true, get: function () { return secret_crypto_js_1.createBrowserSyncplaySecretCrypto; } });
+Object.defineProperty(exports, "verifySyncplaySignedReceipt", { enumerable: true, get: function () { return secret_crypto_js_1.verifySyncplaySignedReceipt; } });
+var secret_authority_js_1 = require("./secret-authority.js");
+Object.defineProperty(exports, "createSyncplaySecretAuthority", { enumerable: true, get: function () { return secret_authority_js_1.createSyncplaySecretAuthority; } });
+var secret_client_js_1 = require("./secret-client.js");
+Object.defineProperty(exports, "createSyncplaySecretEventReader", { enumerable: true, get: function () { return secret_client_js_1.createSyncplaySecretEventReader; } });
+Object.defineProperty(exports, "createSyncplaySecretsClient", { enumerable: true, get: function () { return secret_client_js_1.createSyncplaySecretsClient; } });

package/dist/cjs/input-authority.js

@@ -10,6 +10,7 @@ function createInputAuthority(config) {
     const maxFutureTicks = config.maxFutureTicks ?? Number.POSITIVE_INFINITY;
     const retainedConfirmedFrames = config.retainedConfirmedFrames ?? 512;
     const pending = new Map();
+    const pendingCommands = new Map();
     const lastConfirmedInput = Array.from({ length: playerCount }, () => config.neutralInput);
     const retained = new Map();
     let confirmedThrough = -1;
@@ -22,7 +23,7 @@ function createInputAuthority(config) {
             const frame = frames[index];
             (0, errors_js_1.invariant)(Number.isInteger(frame.tick) && (index === 0 || frame.tick === frames[index - 1].tick + 1), 'restoreFrom frames must be tick-contiguous', 'input-authority.restore-gap');
             (0, errors_js_1.invariant)(frame.inputs.length === playerCount, 'restoreFrom frame inputs must cover every player slot', 'input-authority.restore-inputs');
-            retained.set(frame.tick, frame);
+            retained.set(frame.tick, (0, canonical_js_1.cloneCanonical)(frame));
         }
         (0, errors_js_1.invariant)(frames[frames.length - 1].tick === restoredThrough, 'restoreFrom frames must end at the restored frontier', 'input-authority.restore-frontier');
         earliestRetained = frames[0].tick;
@@ -75,11 +76,16 @@ function createInputAuthority(config) {
             }
         }
         pending.delete(tick);
+        const commands = (pendingCommands.get(tick) ?? [])
+            .map((command) => (0, canonical_js_1.cloneCanonical)(command))
+            .sort(compareAuthorityCommands);
+        pendingCommands.delete(tick);
         const frame = {
             tick,
             inputs,
             substitutedSlots,
-            checksum: String((0, canonical_js_1.defaultChecksum)({ tick, inputs })),
+            ...(commands.length === 0 ? {} : { commands }),
+            checksum: String((0, canonical_js_1.defaultChecksum)(commands.length === 0 ? { tick, inputs } : { tick, inputs, commands })),
         };
         retained.set(tick, frame);
         if (earliestRetained === -1) {
@@ -116,6 +122,13 @@ function createInputAuthority(config) {
             return confirmedThrough;
         },
         receiveInput,
+        queueCommand(tick, command) {
+            (0, errors_js_1.invariant)(Number.isInteger(tick) && tick >= 0, 'command tick must be a non-negative integer', 'input-authority.command-tick');
+            (0, errors_js_1.invariant)(tick > confirmedThrough, `command tick ${tick} is already confirmed`, 'input-authority.command-confirmed');
+            const commands = pendingCommands.get(tick) ?? [];
+            commands.push((0, canonical_js_1.cloneCanonical)(command));
+            pendingCommands.set(tick, commands);
+        },
         advance,
         get earliestRetainedTick() {
             return earliestRetained;
@@ -148,3 +161,22 @@ function createInputAuthority(config) {
         },
     };
 }
+function compareAuthorityCommands(left, right) {
+    const leftRecord = isCanonicalRecord(left) ? left : undefined;
+    const rightRecord = isCanonicalRecord(right) ? right : undefined;
+    const leftSystem = typeof leftRecord?.systemId === 'string' ? leftRecord.systemId : '';
+    const rightSystem = typeof rightRecord?.systemId === 'string' ? rightRecord.systemId : '';
+    const systemOrder = compareCanonicalText(leftSystem, rightSystem);
+    if (systemOrder !== 0)
+        return systemOrder;
+    const leftRequest = typeof leftRecord?.requestId === 'string' ? leftRecord.requestId : '';
+    const rightRequest = typeof rightRecord?.requestId === 'string' ? rightRecord.requestId : '';
+    const requestOrder = compareCanonicalText(leftRequest, rightRequest);
+    return requestOrder !== 0 ? requestOrder : compareCanonicalText((0, canonical_js_1.canonicalStringify)(left), (0, canonical_js_1.canonicalStringify)(right));
+}
+function compareCanonicalText(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function isCanonicalRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}

package/dist/cjs/instant-replay.js

@@ -22,15 +22,10 @@ function runInstantReplay(options) {
         options.onFrame(session.getState(), session.currentFrame);
         expectedFrame += 1;
     }
-    const finalSnapshot = session.getSnapshot(session.currentFrame);
-    /* istanbul ignore if -- the session records a snapshot on every stepped frame. */
-    if (finalSnapshot === undefined) {
-        throw new errors_js_1.SyncplayError('Instant replay session has no snapshot at its final frame', {
-            code: 'instant-replay.missing-final-snapshot',
-            frame: session.currentFrame,
-        });
-    }
-    return { framesPlayed: options.inputs.length, finalChecksum: finalSnapshot.checksum };
+    return {
+        framesPlayed: options.inputs.length,
+        finalChecksum: session.computeRecordedChecksum(session.currentFrame),
+    };
 }
 /**
  * Binds a session config to a replay window. Each `run` simulates on a fresh

package/dist/cjs/local-authority-server-runner.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.LOCAL_AUTHORITY_SNAPSHOT_CHUNK_BYTES = void 0;
 exports.runDeterministicLocalAuthorityServerRunner = runDeterministicLocalAuthorityServerRunner;
 const node_http_1 = require("node:http");
 const canonical_js_1 = require("./canonical.js");
@@ -8,6 +9,7 @@ const commands_js_1 = require("./commands.js");
 const local_authority_wire_js_1 = require("./local-authority-wire.js");
 const lag_compensation3d_js_1 = require("./lag-compensation3d.js");
 const LOCAL_AUTHORITY_MAX_BODY_BYTES = 256 * 1024;
+exports.LOCAL_AUTHORITY_SNAPSHOT_CHUNK_BYTES = 32 * 1024;
 async function runDeterministicLocalAuthorityServerRunner(options = {}) {
     const players = options.players ?? 4;
     const seed = options.seed ?? 71;
@@ -550,7 +552,7 @@ async function driveAuthorityWireResync(baseUrl, runtime, players, seed, sequenc
         wireRequests += 1;
         wireSnapshotRequestEnvelopes += 1;
         wireAuthRejected += request.wire?.rejectionReasons.includes('missing-wire-auth') === true ? 1 : 0;
-        const transfer = (0, local_authority_wire_js_1.createDeterministicLocalAuthoritySnapshotTransfer)(runtime, identity, `runner-transfer-${seed}-${sequenceBase}`, 512);
+        const transfer = (0, local_authority_wire_js_1.createDeterministicLocalAuthoritySnapshotTransfer)(runtime, identity, `runner-transfer-${seed}-${sequenceBase}`, exports.LOCAL_AUTHORITY_SNAPSHOT_CHUNK_BYTES);
         const offer = await postWire(baseUrl, 0, (0, local_authority_wire_js_1.createDeterministicLocalAuthoritySnapshotOfferEnvelope)(sequence, transfer, authoritySign));
         sequence += 1;
         requests += 1;

package/dist/cjs/local-authority-wire.js

@@ -37,10 +37,12 @@ function encodeDeterministicLocalAuthorityWireEnvelope(envelope, sign) {
     };
     const auth = sign === undefined ? undefined : createDeterministicLocalAuthorityWireAuth(withoutChecksum, sign);
     const signedEnvelope = auth === undefined ? withoutChecksum : { ...withoutChecksum, auth };
-    return (0, canonical_js_1.canonicalStringify)({
+    const encoded = (0, canonical_js_1.canonicalStringify)({
         ...signedEnvelope,
         checksum: (0, canonical_js_1.defaultChecksum)(signedEnvelope),
     });
+    assertWireEnvelopeWithinBudget(envelope.kind, encoded);
+    return encoded;
 }
 function decodeDeterministicLocalAuthorityWireEnvelope(encoded) {
     // Bound parse cost BEFORE JSON.parse. The kind-specific budget is only known
@@ -1267,6 +1269,23 @@ const absoluteMaxWireEnvelopeBytes = 2_097_152;
 function maxWireEnvelopeBytes(kind) {
     return kind === 'input-bundle' || kind === 'command-bundle' ? 65_536 : 2_097_152;
 }
+// UTF-8 byte length is at most 3× the UTF-16 length, so every small envelope
+// (per-frame input/command bundles) skips the exact byte measurement.
+function assertWireEnvelopeWithinBudget(kind, encoded) {
+    const budget = maxWireEnvelopeBytes(kind);
+    if (encoded.length * 3 <= budget) {
+        return;
+    }
+    if (encoded.length > budget || (0, canonical_js_1.encodeUtf8)(encoded).byteLength > budget) {
+        throw new Error(wireEnvelopeBudgetError(kind, budget));
+    }
+}
+function wireEnvelopeBudgetError(kind, budget) {
+    if (kind === 'snapshot' || kind === 'correction') {
+        return `Wire ${kind} envelope exceeds the ${budget} byte monolithic budget. A state this large must ride the chunked snapshot-offer/chunk/complete transfer (createSnapshotTransferFromBytes + createDeterministicLocalAuthoritySnapshotOfferEnvelope), which carries snapshots up to the collector's maxSnapshotBytes (default 4194304).`;
+    }
+    return `Wire envelope exceeds ${budget} byte payload budget`;
+}
 function parseWireAuth(value) {
     if (!isRecord(value)) {
         throw new Error('Wire envelope auth must be an object');

package/dist/cjs/match-log.js

@@ -4,6 +4,8 @@ exports.verifyScoredMatchLog = verifyScoredMatchLog;
 exports.matchLogSessionFactory = matchLogSessionFactory;
 const offline_session_js_1 = require("./offline-session.js");
 const canonical_js_1 = require("./canonical.js");
+const secret_command_classification_js_1 = require("./secret-command-classification.js");
+const secret_protocol_js_1 = require("./secret-protocol.js");
 function verifyScoredMatchLog(config) {
     const { log } = config;
     // The log must be the complete, gap-free tick 0..confirmedThrough sequence —
@@ -13,9 +15,34 @@ function verifyScoredMatchLog(config) {
     }
     const session = config.createSession({ seed: log.seed, playerCount: log.playerCount });
     for (const frame of log.frames) {
+        const commands = frame.commands ?? [];
+        for (const command of commands) {
+            if (!(0, secret_protocol_js_1.isSyncplaySecretCommand)(command)) {
+                if ((0, secret_command_classification_js_1.hasSyncplaySecretCommandPrefix)(command)) {
+                    return {
+                        ok: false,
+                        reason: 'authority-command-invalid',
+                        submittedScore: config.submittedScore,
+                        framesReplayed: frame.tick,
+                    };
+                }
+                continue;
+            }
+            if (config.expectedAuthorityId === undefined || config.verifyAuthorityCommand === undefined
+                || command.authorityId !== config.expectedAuthorityId
+                || !config.verifyAuthorityCommand(command, config.expectedAuthorityId)) {
+                return {
+                    ok: false,
+                    reason: 'authority-command-invalid',
+                    submittedScore: config.submittedScore,
+                    framesReplayed: frame.tick,
+                };
+            }
+        }
         for (let slot = 0; slot < log.playerCount; slot += 1) {
             session.setInput(slot, config.decodeInput(frame.inputs[slot]));
         }
+        session.recordCommands(commands);
         session.stepFrames(1);
     }
     const finalChecksum = String((0, canonical_js_1.defaultChecksum)(session.getState()));

package/dist/cjs/movement3d.js

@@ -188,8 +188,11 @@ function computeKccPushImpulses(physics, x, y, z, velocity, geometry, maxPushImp
         const magnitude = Math.min(speedIntoBody * KCC_PUSH_MASS, maxPushImpulse);
         impulses.push({
             bodyId: body.id,
+            // Apply through the body's center of mass so the horizontal push slides the
+            // body rather than torquing it — the soft-step solver's livelier angular
+            // response otherwise lets an above-COM push tumble a light crate.
             impulse: { x: dirX * magnitude, y: 0, z: dirZ * magnitude },
-            point: { x: body.x, y, z: body.z },
+            point: { x: body.x, y: body.y, z: body.z },
         });
     }
     return impulses;
@@ -260,6 +263,19 @@ function primitiveHalfExtent(shape, m) {
     if (shape.type === 'sphere') {
         return { x: shape.radius, y: shape.radius, z: shape.radius };
     }
+    if (shape.type === 'hull') {
+        // Same symmetric bound the solver uses (physics3d-solver shapeHalfExtent).
+        let ext = { x: 0, y: 0, z: 0 };
+        for (const vertex of shape.vertices) {
+            const rotated = (0, physics3d_shared_js_1.mulMat3Vec)(m, vertex);
+            ext = {
+                x: Math.max(ext.x, Math.abs(rotated.x)),
+                y: Math.max(ext.y, Math.abs(rotated.y)),
+                z: Math.max(ext.z, Math.abs(rotated.z)),
+            };
+        }
+        return ext;
+    }
     if (shape.type === 'box') {
         return {
             x: Math.abs(m[0]) * shape.halfX + Math.abs(m[1]) * shape.halfY + Math.abs(m[2]) * shape.halfZ,