@series-inc/rundot-syncplay 5.24.0-beta.0 → 5.24.0-beta.1

package/README.md

@@ -8,18 +8,29 @@ rollback — with no game-specific server logic.
 This package is intentionally standalone. It does not depend on Venus MP,
 Cloud Run, React Three Fiber, Rapier, Firebase, or the SDK bridge.
 
-## Preview Status
-
-This is a headless engine and certification package. It is designed to prove
-deterministic simulation behavior from the CLI before renderer integration is
-added, and to hand deploy-check artifacts to Venus backend upload/room-server
-validation when a room bundle opts in.
-
-Production matchmaking, ticket UX, client connection flows, and R3F renderer
-proof are not part of this package yet. The current production-facing Venus MP
-changes validate uploaded deterministic room proof metadata and pass normalized
-proof into room startup; they do not add new matchmaking or client connection
-semantics.
+## Public and private projections
+
+The deterministic session remains a shared public projection: every client
+applies the same confirmed inputs and authority commands. Optional secret
+systems add a separate authority-owned projection for simultaneous choices,
+cryptographic random draws, decks, bags, and roles. Private values go only to
+their owners; signed public consequences join exactly one confirmed frame and
+therefore survive rollback, replay, reconnect, and match-log verification.
+
+The RUN room authority is trusted and can see secret values. SHA-256
+commitments, hash chains, Merkle proofs, and Ed25519 receipts prevent peers or
+tampered logs from forging outcomes; they do not hide a player's own values
+from that player's browser or make the authority zero-knowledge. Public donated
+snapshots remain secret-free, while server-only secret state restores against a
+cryptographic configuration hash.
+
+## BETA Status
+
+The standalone engine, certification CLI, curated public entrypoints, SDK bridge,
+generic input authority, replay verification, and hosted multiplayer path are in
+active development. Syncplay has not gone live. Package publication, production
+rollout, and 1.0 graduation are separate release decisions; this build remains
+explicitly BETA.
 
 ## State Ownership Contract
 
@@ -557,6 +568,16 @@ remediation text. Valid suppressions must use
 `// rdm-ignore-next-line <rule-id>: <reason>` and are reported with file, line,
 rule, and reason; invalid suppressions are errors.
 
+`static:determinism` with explicit paths (`--entry`, `--paths`) follows the
+import graph transitively by default (`--no-follow-imports` opts out); the
+JSON artifact records `requestedPaths` (CLI inputs), `checkedPaths` (files
+actually checked, post-traversal), `followImports`, and `unresolvedImports`
+(relative imports that resolve to no file — unchecked holes). Bare package
+specifiers are never followed; if your simulation uses tsconfig path aliases,
+pass `--project tsconfig.json` so aliased imports resolve and get checked —
+without it they are skipped like package imports. Package self-certification
+(no explicit paths) checks its curated source list without following imports.
+
 The checker covers host random/time, timers, async simulation work, I/O,
 unordered object iteration, random sort comparators, render-object mutation,
 uncertified physics stepping, and descriptor-declared state-field access.

package/dist/authority-room.d.ts

@@ -1,5 +1,8 @@
 import { type ConfirmedInputFrame, type EncodedInput } from './input-authority.js';
 import type { SyncplayMatchLog } from './match-log.js';
+import { type SyncplaySecretAuthoritySnapshot } from './secret-authority.js';
+import type { SyncplaySecretAuthorityCrypto } from './secret-crypto.js';
+import type { SyncplaySecretSystemsConfig } from './secret-config.js';
 /**
  * Transport-agnostic, game-agnostic deterministic authority room (§6 M2).
  *
@@ -89,6 +92,10 @@ export interface DeterministicAuthorityRoomConfig {
      * MUST call `resyncSeatedPlayers()` so surviving clients re-seat.
      */
     readonly restoreFrom?: DeterministicAuthorityRoomRestoreState;
+    readonly authorityId?: string;
+    readonly secrets?: SyncplaySecretSystemsConfig;
+    readonly secretCrypto?: SyncplaySecretAuthorityCrypto;
+    readonly secretMsgType?: string;
 }
 export interface DeterministicAuthorityRoomRestoreState {
     readonly now: number;
@@ -98,6 +105,7 @@ export interface DeterministicAuthorityRoomRestoreState {
     readonly tail: readonly ConfirmedInputFrame[];
     readonly snapshotBytes?: string;
     readonly schemaHash?: string;
+    readonly secretState?: SyncplaySecretAuthoritySnapshot;
 }
 export interface AuthorityRoomCatchUpEvent {
     readonly playerId: string;
@@ -178,6 +186,7 @@ export interface DeterministicAuthorityRoom {
     /** Seat a read-only spectator (G11): role 'spectator', no slot, full catch-up + live follow. */
     onSpectatorJoin(playerId: string): boolean;
     onPlayerMessage(playerId: string, envelope: string): void;
+    onPlayerSecretMessage(playerId: string, envelope: string): void;
     onPlayerLeave(playerId: string): void;
     /**
      * A player's transport re-attached inside the host's grace window (socket
@@ -213,5 +222,7 @@ export interface DeterministicAuthorityRoom {
      * `preserveFullHistory`, or the match outlived `historyRetentionTicks`).
      */
     matchLog(): SyncplayMatchLog | undefined;
+    /** Server-only secret state. Never include this value in public snapshots or match logs. */
+    secretSnapshot(): SyncplaySecretAuthoritySnapshot | undefined;
 }
 export declare function createDeterministicAuthorityRoom(transport: AuthorityRoomTransport, config: DeterministicAuthorityRoomConfig): DeterministicAuthorityRoom;

package/dist/authority-room.js

@@ -4,7 +4,9 @@ import { createInputAuthority } from './input-authority.js';
 import { createDeterministicLocalAuthoritySnapshotChunkEnvelope, createDeterministicLocalAuthoritySnapshotCompleteEnvelope, createDeterministicLocalAuthoritySnapshotOfferEnvelope, createDeterministicLocalAuthoritySnapshotRequestEnvelope, decodeDeterministicLocalAuthorityWireEnvelope, } from './local-authority-wire.js';
 import { DEFAULT_SNAPSHOT_CHUNK_SIZE, createSnapshotTransferCollector, createSnapshotTransferFromBytes, decodeDeterministicStateSnapshot, deterministicRoomDescriptorHash, } from './session-snapshot.js';
 import { decodeDeterministicSessionMessage, encodeDeterministicSessionMessage } from './session-wire.js';
+import { createSyncplaySecretAuthority, } from './secret-authority.js';
 const DEFAULT_SESSION_MSG_TYPE = 'rdm';
+const DEFAULT_SECRET_MSG_TYPE = 'rdm-secret';
 /** One hour at 60 Hz — see DeterministicAuthorityRoomConfig.historyRetentionTicks. */
 const DEFAULT_HISTORY_RETENTION_TICKS = 216_000;
 /** Frames per history-replay unicast. Bounds message size during catch-up. */
@@ -48,6 +50,18 @@ export function createDeterministicAuthorityRoom(transport, config) {
     // colliding with a still-present player and orphaning the vacated slot.
     let assignedSlots = 0;
     let now = -1;
+    const secretAuthority = config.secrets === undefined
+        ? undefined
+        : createSyncplaySecretAuthority({
+            authorityId: requireSecretAuthorityId(config.authorityId),
+            playerCount: config.playerCount,
+            config: config.secrets,
+            crypto: requireSecretCrypto(config.secretCrypto),
+            sendPrivate(playerId, encoded) {
+                transport.sendTo(playerId, config.secretMsgType ?? DEFAULT_SECRET_MSG_TYPE, encoded);
+            },
+            ...(config.restoreFrom?.secretState === undefined ? {} : { restoreFrom: config.restoreFrom.secretState }),
+        });
     // M5.5 snapshot acquisition state. The authority stores at most one validated
     // snapshot and runs at most one donor transfer at a time.
     const snapshotCadenceTicks = config.snapshotCadenceTicks ?? DEFAULT_SNAPSHOT_CADENCE_TICKS;
@@ -227,6 +241,7 @@ export function createDeterministicAuthorityRoom(transport, config) {
             const plan = catchUpPlan();
             invariant(plan !== 'unavailable', 'a restored room must have a catch-up plan for seated players', 'authority-room.restore-catchup');
             sendSessionStart(playerId, slot);
+            secretAuthority?.onPlayerReconnected(playerId, slot);
             sendCatchUpTo(playerId, plan, 'resync');
         }
     }
@@ -246,6 +261,7 @@ export function createDeterministicAuthorityRoom(transport, config) {
             }
             slotByPlayer.set(playerId, formerSlot);
             sendSessionStart(playerId, formerSlot);
+            secretAuthority?.onPlayerReconnected(playerId, formerSlot);
             sendCatchUpTo(playerId, rejoinPlan, 'rejoin');
             return { accepted: true, slot: formerSlot, rejoined: true };
         }
@@ -264,6 +280,7 @@ export function createDeterministicAuthorityRoom(transport, config) {
         slotByPlayer.set(playerId, slot);
         everSlotByPlayer.set(playerId, slot);
         sendSessionStart(playerId, slot);
+        secretAuthority?.onPlayerJoined(playerId, slot);
         sendCatchUpTo(playerId, plan, 'join');
         return { accepted: true, slot };
     }
@@ -283,6 +300,7 @@ export function createDeterministicAuthorityRoom(transport, config) {
             return false;
         spectators.add(playerId);
         sendSessionStart(playerId, -1, 'spectator');
+        secretAuthority?.onSpectatorJoined(playerId);
         sendCatchUpTo(playerId, plan, 'join');
         return true;
     }
@@ -309,8 +327,14 @@ export function createDeterministicAuthorityRoom(transport, config) {
         // client that fell behind the snapshot tick, so the stored snapshot rides
         // along — the client applies it only when it is ahead of its own state.
         const reconnectPlan = !historyReachesTickZero() && storedSnapshot !== undefined ? 'snapshot' : 'history';
+        secretAuthority?.onPlayerReconnected(playerId, slot);
         sendCatchUpTo(playerId, reconnectPlan, 'reconnect');
     }
+    function onPlayerSecretMessage(playerId, envelope) {
+        if (secretAuthority === undefined)
+            return;
+        secretAuthority.onPlayerRequest(playerId, slotByPlayer.get(playerId) ?? -1, envelope);
+    }
     function onPlayerMessage(playerId, envelope) {
         // Fail closed: unknown/malformed messages are dropped. Snapshot transfer
         // envelopes are the OTHER frozen wire family (schemaVersion vs v field) —
@@ -571,7 +595,10 @@ export function createDeterministicAuthorityRoom(transport, config) {
         // Fixed roster for v1 (late-join/reconnect is M5). Dropping the mapping stops accepting the
         // departed player's input; their slot stays reserved because `assignedSlots` never decreases,
         // so the authority substitutes for it rather than handing the number to a new joiner.
+        const slot = slotByPlayer.get(playerId);
         slotByPlayer.delete(playerId);
+        if (slot !== undefined)
+            secretAuthority?.onPlayerLeft(playerId, slot);
         if (pendingTransfer?.donorId === playerId) {
             failPendingTransfer('snapshot-donor-left');
         }
@@ -586,6 +613,9 @@ export function createDeterministicAuthorityRoom(transport, config) {
             return;
         }
         now += 1;
+        for (const command of secretAuthority?.onTick(now, [...slotByPlayer.values()]) ?? []) {
+            authority.queueCommand(now, command);
+        }
         authority.advance(now);
         maintainSnapshotAcquisition();
         if (authority.confirmedThrough < 0) {
@@ -636,6 +666,7 @@ export function createDeterministicAuthorityRoom(transport, config) {
         onPlayerJoin,
         onSpectatorJoin,
         onPlayerMessage,
+        onPlayerSecretMessage,
         onPlayerLeave,
         onPlayerReconnected,
         onTick,
@@ -672,6 +703,7 @@ export function createDeterministicAuthorityRoom(transport, config) {
             if (plan === 'unavailable')
                 return false;
             sendSessionStart(playerId, slot);
+            secretAuthority?.onPlayerReconnected(playerId, slot);
             sendCatchUpTo(playerId, plan, 'resync');
             return true;
         },
@@ -697,5 +729,16 @@ export function createDeterministicAuthorityRoom(transport, config) {
                 frames: authority.confirmedFrameRange(0, authority.confirmedThrough),
             };
         },
+        secretSnapshot() {
+            return secretAuthority?.snapshot();
+        },
     };
 }
+function requireSecretAuthorityId(authorityId) {
+    invariant(typeof authorityId === 'string' && authorityId.length > 0, 'secret authorityId is required', 'authority-room.secret-authority-id');
+    return authorityId;
+}
+function requireSecretCrypto(crypto) {
+    invariant(crypto !== undefined, 'secret signing is unavailable', 'authority-room.secret-signing');
+    return crypto;
+}

package/dist/browser.d.ts

@@ -90,3 +90,10 @@ export type { DeterministicSignal, DeterministicSignalBus, DeterministicSignalBu
 export type { DeterministicSparseSet, DeterministicSparseSetSnapshot } from './sparse-set.js';
 export type { DeterministicLifecycleCounterSummary, DeterministicLifecycleRunner, DeterministicLifecycleSignal, DeterministicLifecycleSnapshot, DeterministicLifecycleSystemContext, DeterministicLifecycleSystemDescriptor, DeterministicLifecycleSystemHooks } from './system-lifecycle.js';
 export type { DeterministicStep, ReplayFile, ReplayVerificationResult } from './types.js';
+export { syncplaySecretConfigHash, syncplaySecretLimits, validateSyncplaySecretSystemsConfig } from './secret-config.js';
+export { decodeSyncplaySecretPrivateMessage, isSyncplaySecretCommand, syncplaySecretProtocol } from './secret-protocol.js';
+export { createBrowserSyncplaySecretCrypto, verifySyncplaySignedReceipt } from './secret-crypto.js';
+export { createSyncplaySecretEventReader, createSyncplaySecretsClient } from './secret-client.js';
+export type { SyncplaySecretSystemDefinition, SyncplaySecretSystemsConfig } from './secret-config.js';
+export type { SyncplayOwnedSecretToken, SyncplaySecretCommand, SyncplaySecretErrorCode, SyncplaySecretPrivateMessage, SyncplaySignedReceipt } from './secret-protocol.js';
+export type { SyncplayChoiceClient, SyncplayChoiceResolvedEvent, SyncplayCollectionClient, SyncplayCollectionRevealedEvent, SyncplayOwnedSecret, SyncplayRandomClient, SyncplayRandomDrawnEvent, SyncplayRoleClient, SyncplayRoleRevealedEvent, SyncplaySecretEventReader, SyncplaySecretsClient } from './secret-client.js';

package/dist/browser.js

@@ -47,3 +47,7 @@ export { decodeDeterministicSessionMessage, deterministicSessionWireVersion, enc
 export { createDeterministicSignalBus } from './signals.js';
 export { createDeterministicSparseSet } from './sparse-set.js';
 export { createDeterministicLifecycleRunner, summarizeDeterministicLifecycleCounters } from './system-lifecycle.js';
+export { syncplaySecretConfigHash, syncplaySecretLimits, validateSyncplaySecretSystemsConfig } from './secret-config.js';
+export { decodeSyncplaySecretPrivateMessage, isSyncplaySecretCommand, syncplaySecretProtocol } from './secret-protocol.js';
+export { createBrowserSyncplaySecretCrypto, verifySyncplaySignedReceipt } from './secret-crypto.js';
+export { createSyncplaySecretEventReader, createSyncplaySecretsClient } from './secret-client.js';

package/dist/cjs/authority-room.js

@@ -7,7 +7,9 @@ const input_authority_js_1 = require("./input-authority.js");
 const local_authority_wire_js_1 = require("./local-authority-wire.js");
 const session_snapshot_js_1 = require("./session-snapshot.js");
 const session_wire_js_1 = require("./session-wire.js");
+const secret_authority_js_1 = require("./secret-authority.js");
 const DEFAULT_SESSION_MSG_TYPE = 'rdm';
+const DEFAULT_SECRET_MSG_TYPE = 'rdm-secret';
 /** One hour at 60 Hz — see DeterministicAuthorityRoomConfig.historyRetentionTicks. */
 const DEFAULT_HISTORY_RETENTION_TICKS = 216_000;
 /** Frames per history-replay unicast. Bounds message size during catch-up. */
@@ -51,6 +53,18 @@ function createDeterministicAuthorityRoom(transport, config) {
     // colliding with a still-present player and orphaning the vacated slot.
     let assignedSlots = 0;
     let now = -1;
+    const secretAuthority = config.secrets === undefined
+        ? undefined
+        : (0, secret_authority_js_1.createSyncplaySecretAuthority)({
+            authorityId: requireSecretAuthorityId(config.authorityId),
+            playerCount: config.playerCount,
+            config: config.secrets,
+            crypto: requireSecretCrypto(config.secretCrypto),
+            sendPrivate(playerId, encoded) {
+                transport.sendTo(playerId, config.secretMsgType ?? DEFAULT_SECRET_MSG_TYPE, encoded);
+            },
+            ...(config.restoreFrom?.secretState === undefined ? {} : { restoreFrom: config.restoreFrom.secretState }),
+        });
     // M5.5 snapshot acquisition state. The authority stores at most one validated
     // snapshot and runs at most one donor transfer at a time.
     const snapshotCadenceTicks = config.snapshotCadenceTicks ?? DEFAULT_SNAPSHOT_CADENCE_TICKS;
@@ -230,6 +244,7 @@ function createDeterministicAuthorityRoom(transport, config) {
             const plan = catchUpPlan();
             (0, errors_js_1.invariant)(plan !== 'unavailable', 'a restored room must have a catch-up plan for seated players', 'authority-room.restore-catchup');
             sendSessionStart(playerId, slot);
+            secretAuthority?.onPlayerReconnected(playerId, slot);
             sendCatchUpTo(playerId, plan, 'resync');
         }
     }
@@ -249,6 +264,7 @@ function createDeterministicAuthorityRoom(transport, config) {
             }
             slotByPlayer.set(playerId, formerSlot);
             sendSessionStart(playerId, formerSlot);
+            secretAuthority?.onPlayerReconnected(playerId, formerSlot);
             sendCatchUpTo(playerId, rejoinPlan, 'rejoin');
             return { accepted: true, slot: formerSlot, rejoined: true };
         }
@@ -267,6 +283,7 @@ function createDeterministicAuthorityRoom(transport, config) {
         slotByPlayer.set(playerId, slot);
         everSlotByPlayer.set(playerId, slot);
         sendSessionStart(playerId, slot);
+        secretAuthority?.onPlayerJoined(playerId, slot);
         sendCatchUpTo(playerId, plan, 'join');
         return { accepted: true, slot };
     }
@@ -286,6 +303,7 @@ function createDeterministicAuthorityRoom(transport, config) {
             return false;
         spectators.add(playerId);
         sendSessionStart(playerId, -1, 'spectator');
+        secretAuthority?.onSpectatorJoined(playerId);
         sendCatchUpTo(playerId, plan, 'join');
         return true;
     }
@@ -312,8 +330,14 @@ function createDeterministicAuthorityRoom(transport, config) {
         // client that fell behind the snapshot tick, so the stored snapshot rides
         // along — the client applies it only when it is ahead of its own state.
         const reconnectPlan = !historyReachesTickZero() && storedSnapshot !== undefined ? 'snapshot' : 'history';
+        secretAuthority?.onPlayerReconnected(playerId, slot);
         sendCatchUpTo(playerId, reconnectPlan, 'reconnect');
     }
+    function onPlayerSecretMessage(playerId, envelope) {
+        if (secretAuthority === undefined)
+            return;
+        secretAuthority.onPlayerRequest(playerId, slotByPlayer.get(playerId) ?? -1, envelope);
+    }
     function onPlayerMessage(playerId, envelope) {
         // Fail closed: unknown/malformed messages are dropped. Snapshot transfer
         // envelopes are the OTHER frozen wire family (schemaVersion vs v field) —
@@ -574,7 +598,10 @@ function createDeterministicAuthorityRoom(transport, config) {
         // Fixed roster for v1 (late-join/reconnect is M5). Dropping the mapping stops accepting the
         // departed player's input; their slot stays reserved because `assignedSlots` never decreases,
         // so the authority substitutes for it rather than handing the number to a new joiner.
+        const slot = slotByPlayer.get(playerId);
         slotByPlayer.delete(playerId);
+        if (slot !== undefined)
+            secretAuthority?.onPlayerLeft(playerId, slot);
         if (pendingTransfer?.donorId === playerId) {
             failPendingTransfer('snapshot-donor-left');
         }
@@ -589,6 +616,9 @@ function createDeterministicAuthorityRoom(transport, config) {
             return;
         }
         now += 1;
+        for (const command of secretAuthority?.onTick(now, [...slotByPlayer.values()]) ?? []) {
+            authority.queueCommand(now, command);
+        }
         authority.advance(now);
         maintainSnapshotAcquisition();
         if (authority.confirmedThrough < 0) {
@@ -639,6 +669,7 @@ function createDeterministicAuthorityRoom(transport, config) {
         onPlayerJoin,
         onSpectatorJoin,
         onPlayerMessage,
+        onPlayerSecretMessage,
         onPlayerLeave,
         onPlayerReconnected,
         onTick,
@@ -675,6 +706,7 @@ function createDeterministicAuthorityRoom(transport, config) {
             if (plan === 'unavailable')
                 return false;
             sendSessionStart(playerId, slot);
+            secretAuthority?.onPlayerReconnected(playerId, slot);
             sendCatchUpTo(playerId, plan, 'resync');
             return true;
         },
@@ -700,5 +732,16 @@ function createDeterministicAuthorityRoom(transport, config) {
                 frames: authority.confirmedFrameRange(0, authority.confirmedThrough),
             };
         },
+        secretSnapshot() {
+            return secretAuthority?.snapshot();
+        },
     };
 }
+function requireSecretAuthorityId(authorityId) {
+    (0, errors_js_1.invariant)(typeof authorityId === 'string' && authorityId.length > 0, 'secret authorityId is required', 'authority-room.secret-authority-id');
+    return authorityId;
+}
+function requireSecretCrypto(crypto) {
+    (0, errors_js_1.invariant)(crypto !== undefined, 'secret signing is unavailable', 'authority-room.secret-signing');
+    return crypto;
+}

package/dist/cjs/browser.js

@@ -5,7 +5,7 @@ exports.sortAabbsByStableId = exports.segmentsIntersect = exports.segmentSegment
 exports.createDeterministicLocalAuthoritySnapshotOfferEnvelope = exports.createDeterministicLocalAuthoritySnapshotEnvelope = exports.createDeterministicLocalAuthoritySnapshotCompleteEnvelope = exports.createDeterministicLocalAuthoritySnapshotChunkEnvelope = exports.createDeterministicLocalAuthorityInputBundleEnvelope = exports.createDeterministicLocalAuthorityCorrectionEnvelope = exports.createDeterministicLocalAuthorityCommandBundleEnvelope = exports.createDeterministicLocalAuthorityAckEnvelope = exports.applyDeterministicLocalAuthorityInputBundleEnvelope = exports.applyDeterministicLocalAuthorityCommandBundleEnvelope = exports.createDeterministicLocalAuthorityRuntime = exports.validateDeterministicLagCompensatedShot3D = exports.validateDeterministicAuthoritativeLagCompensatedShot3D = exports.rewindDeterministicLagCompensatedTargets3D = exports.createDeterministicLagCompensation3DHistory = exports.buildDeterministicLagCompensatedHitboxProxies3D = exports.runInstantReplay = exports.createInstantReplayRunner = exports.sortDeterministicInputTimelineFlags = exports.evaluateDeterministicInputTimelineResult = exports.accumulateDeterministicInputTimelineState = exports.createInputAuthority = exports.filterDeterministicEventsForPlayer = exports.createDeterministicEventTimeline = exports.validateDeterministicFrameSystemsStateless = exports.runDeterministicFrameRuntimeMutationCorpus = exports.isDeterministicFrameHeapStaleHandleError = exports.generateDeterministicFrameRuntimeSource = exports.createDeterministicSparseSetFrameRuntime = exports.createDeterministicSlotMap = exports.createDeterministicFrameRuntimeAccessors = exports.createDeterministicFrameRuntime = exports.createDeterministicBitset = exports.compileDeterministicDslRuntimeDescriptor = exports.assertDeterministicFrameSystemsStateless = exports.assertDeterministicFrameHeapStaleHandleError = exports.createDeterministicEventEffectsAdapter = exports.verifyDeterministicSessionRuntimeReplay = exports.createDeterministicSessionReplayBundle = exports.createDeterministicSessionCore = exports.verifyDeterministicConfigBundle = exports.summarizeDeterministicConfigBundleFailureReasons = exports.evaluateDeterministicConfigBundleParityResult = exports.cookDeterministicConfigBundle = exports.evaluateDeterministicCommandTimelineMigrationResult = exports.deterministicPayloadMatchesFields = exports.createDeterministicCommandTimelineSnapshot = exports.createDeterministicCommandTimeline = exports.assertDeterministicPayloadFields = exports.translateAabb = void 0;
 exports.stepDeterministicPhysicsWorld2D = exports.raycastDeterministicPhysics2D = exports.raycastAllDeterministicPhysics2D = exports.queryDeterministicPhysicsShapeOverlap2D = exports.queryDeterministicPhysicsAabb2D = exports.nearestDeterministicPhysicsHit2D = exports.createDeterministicPhysicsWorld2D = exports.circleCastDeterministicPhysics2D = exports.createPauseController = exports.createOfflineSession = exports.valueNoise2D = exports.valueNoise1D = exports.hashUint32 = exports.hash2 = exports.fbm2D = exports.createNetworkedSyncplayClient = exports.stepDeterministicNavmeshOffMeshTraversal = exports.stepDeterministicNavmeshAgents = exports.smoothDeterministicNavmeshPath = exports.runDeterministicNavmeshStress = exports.locateDeterministicNavmeshPolygon = exports.findDeterministicNavmeshPointPath = exports.findDeterministicNavmeshPath = exports.cookImportedDeterministicNavmesh = exports.cookDeterministicNavmesh = exports.stepDeterministicNavigationAgents = exports.smoothDeterministicPath = exports.findDeterministicPath = exports.createDeterministicFlowField = exports.cookTilemapNavigationGraph = exports.cookDeterministicNavigationGraph = exports.applyDeterministicReciprocalAvoidance = exports.createSyncplayClient = exports.stepDeterministicKcc3D = exports.stepDeterministicCarry3D = exports.validateDeterministicLagCompensatedHit = exports.stepDeterministicTopDownMover = exports.stepDeterministicKcc2D = exports.stepDeterministicFpsAim = exports.runDeterministicMovementSimulation = exports.runDeterministicMovementCrowdSimulation = exports.rewindDeterministicTargets = exports.createDeterministicMath = exports.encodeDeterministicLocalAuthorityWireEnvelope = exports.deterministicLocalAuthorityWireProtocol = exports.decodeDeterministicLocalAuthorityWireEnvelope = exports.createDeterministicLocalAuthorityWireReceiver = exports.createDeterministicLocalAuthorityWireAuth = exports.createDeterministicLocalAuthoritySnapshotTransfer = exports.createDeterministicLocalAuthoritySnapshotRequestEnvelope = void 0;
 exports.bytesToBase64 = exports.base64ToBytes = exports.exportPromotionSnapshot = exports.createSessionFromPromotionSnapshot = exports.createSyncplaySession = exports.createSyncplayOfflineRuntime = exports.createSyncplayGameRuntime = exports.stableDeterministicDslSchemaJson = exports.parseDeterministicSchemaDsl = exports.deterministicDslMaxPlayers = exports.createDeterministicBinarySerializer = exports.proveSchemaBinaryRoundTrip = exports.generateSchemaTypes = exports.generateSchemaBinarySource = exports.createDeterministicDescriptorBinarySchema = exports.createSchemaArtifacts = exports.stableDescriptorId = exports.defineSyncplayGame = exports.verifyReplayScoreAgainstTrustedRuntime = exports.verifyDeterministicSelfContainedFrameRuntimeReplayBundle = exports.verifyDeterministicReplayBundle = exports.verifyDeterministicFrameRuntimeReplayBundle = exports.sliceDeterministicReplayBundle = exports.minimizeDeterministicReplayDesyncBundle = exports.minimizeDeterministicReplayDesync = exports.createDeterministicReplayRuntimeManifest = exports.createDeterministicReplayDebugTables = exports.createDeterministicReplayBundle = exports.verifyReplay = exports.verifyDeterministicReplay = exports.interpolateDeterministicRenderVec2 = exports.interpolateDeterministicRenderNumber = exports.createDeterministicR3fRenderAdapter = exports.createDeterministicR3fAdapter = exports.stepDeterministicVehicle3D = exports.stepDeterministicPhysicsWorld3D = exports.shapeCastDeterministicPhysics3DDetailed = exports.shapeCastDeterministicPhysics3D = exports.setDeterministicBodyVelocity3D = exports.runDeterministicPhysics3DStress = exports.raycastDeterministicPhysics3DDetailed = exports.raycastDeterministicPhysics3D = exports.overlapDeterministicPhysics3D = exports.deterministicPhysicsCallback3D = exports.deterministicPhysicsBodyById3D = exports.deriveInverseInertia = exports.createDeterministicPhysicsWorld3D = exports.contactDetailsDeterministicPhysics3D = exports.applyDeterministicImpulses3D = exports.applyDeterministicImpulse3D = void 0;
-exports.summarizeDeterministicLifecycleCounters = exports.createDeterministicLifecycleRunner = exports.createDeterministicSparseSet = exports.createDeterministicSignalBus = exports.encodeDeterministicSessionMessage = exports.deterministicSessionWireVersion = exports.decodeDeterministicSessionMessage = exports.encodeDeterministicStateSnapshot = exports.deterministicRoomDescriptorHash = exports.DEFAULT_SNAPSHOT_CHUNK_SIZE = exports.DEFAULT_MAX_SNAPSHOT_BYTES = exports.decodeDeterministicStateSnapshot = exports.createSnapshotTransferFromBytes = exports.createSnapshotTransferCollector = void 0;
+exports.createSyncplaySecretsClient = exports.createSyncplaySecretEventReader = exports.verifySyncplaySignedReceipt = exports.createBrowserSyncplaySecretCrypto = exports.syncplaySecretProtocol = exports.isSyncplaySecretCommand = exports.decodeSyncplaySecretPrivateMessage = exports.validateSyncplaySecretSystemsConfig = exports.syncplaySecretLimits = exports.syncplaySecretConfigHash = exports.summarizeDeterministicLifecycleCounters = exports.createDeterministicLifecycleRunner = exports.createDeterministicSparseSet = exports.createDeterministicSignalBus = exports.encodeDeterministicSessionMessage = exports.deterministicSessionWireVersion = exports.decodeDeterministicSessionMessage = exports.encodeDeterministicStateSnapshot = exports.deterministicRoomDescriptorHash = exports.DEFAULT_SNAPSHOT_CHUNK_SIZE = exports.DEFAULT_MAX_SNAPSHOT_BYTES = exports.decodeDeterministicStateSnapshot = exports.createSnapshotTransferFromBytes = exports.createSnapshotTransferCollector = void 0;
 var animation_js_1 = require("./animation.js");
 Object.defineProperty(exports, "cookDeterministicAnimation", { enumerable: true, get: function () { return animation_js_1.cookDeterministicAnimation; } });
 Object.defineProperty(exports, "createDeterministicAnimationRuntimeState", { enumerable: true, get: function () { return animation_js_1.createDeterministicAnimationRuntimeState; } });
@@ -268,3 +268,17 @@ Object.defineProperty(exports, "createDeterministicSparseSet", { enumerable: tru
 var system_lifecycle_js_1 = require("./system-lifecycle.js");
 Object.defineProperty(exports, "createDeterministicLifecycleRunner", { enumerable: true, get: function () { return system_lifecycle_js_1.createDeterministicLifecycleRunner; } });
 Object.defineProperty(exports, "summarizeDeterministicLifecycleCounters", { enumerable: true, get: function () { return system_lifecycle_js_1.summarizeDeterministicLifecycleCounters; } });
+var secret_config_js_1 = require("./secret-config.js");
+Object.defineProperty(exports, "syncplaySecretConfigHash", { enumerable: true, get: function () { return secret_config_js_1.syncplaySecretConfigHash; } });
+Object.defineProperty(exports, "syncplaySecretLimits", { enumerable: true, get: function () { return secret_config_js_1.syncplaySecretLimits; } });
+Object.defineProperty(exports, "validateSyncplaySecretSystemsConfig", { enumerable: true, get: function () { return secret_config_js_1.validateSyncplaySecretSystemsConfig; } });
+var secret_protocol_js_1 = require("./secret-protocol.js");
+Object.defineProperty(exports, "decodeSyncplaySecretPrivateMessage", { enumerable: true, get: function () { return secret_protocol_js_1.decodeSyncplaySecretPrivateMessage; } });
+Object.defineProperty(exports, "isSyncplaySecretCommand", { enumerable: true, get: function () { return secret_protocol_js_1.isSyncplaySecretCommand; } });
+Object.defineProperty(exports, "syncplaySecretProtocol", { enumerable: true, get: function () { return secret_protocol_js_1.syncplaySecretProtocol; } });
+var secret_crypto_js_1 = require("./secret-crypto.js");
+Object.defineProperty(exports, "createBrowserSyncplaySecretCrypto", { enumerable: true, get: function () { return secret_crypto_js_1.createBrowserSyncplaySecretCrypto; } });
+Object.defineProperty(exports, "verifySyncplaySignedReceipt", { enumerable: true, get: function () { return secret_crypto_js_1.verifySyncplaySignedReceipt; } });
+var secret_client_js_1 = require("./secret-client.js");
+Object.defineProperty(exports, "createSyncplaySecretEventReader", { enumerable: true, get: function () { return secret_client_js_1.createSyncplaySecretEventReader; } });
+Object.defineProperty(exports, "createSyncplaySecretsClient", { enumerable: true, get: function () { return secret_client_js_1.createSyncplaySecretsClient; } });

package/dist/cjs/engine-complete.js

@@ -1276,10 +1276,7 @@ function physicsCategory(bodies, requestedFrames, executedFrames, enforceThresho
             && stack.settledDynamicBodies === stack.stackLayers,
         stackRollbackEquivalent: stack.rollbackEquivalent,
         stackAuthoringOrderStable: stack.stableUnderAuthoringOrderPermutation,
-        // Rigid-solver material response (impulse-based) — combine semantics unchanged
-        // (floor-average friction, max restitution); the bounce/friction velocity
-        // magnitudes come from the sequential-impulse solver, not the legacy pusher.
-        materialResponseCovered: materials.combinedFriction === 3
+        materialResponseCovered: Math.abs(materials.combinedFriction - 0.28284271) < 1e-6
             && materials.combinedRestitution === 7
             && materials.normalVelocityAfterBounce > 0
             && materials.tangentVelocityAfterFrictionY < 10

package/dist/cjs/engine-parity-matrix.js

@@ -625,11 +625,18 @@ const engineParityMatrixEntries = [
             'packages/syncplay/src/physics3d-solver.ts',
             'packages/syncplay/src/physics3d-toi.ts',
             'packages/syncplay/src/physics3d-joints.ts',
+            'packages/syncplay/src/physics3d-mass.ts',
+            'packages/syncplay/src/physics3d-heightfield.ts',
             'packages/syncplay/tests/physics2d.test.ts',
             'packages/syncplay/tests/physics3d-solver.test.ts',
             'packages/syncplay/tests/physics3d-joints.test.ts',
             'packages/syncplay/tests/physics3d-ccd.test.ts',
             'packages/syncplay/tests/physics3d-toi.test.ts',
+            'packages/syncplay/tests/physics3d-mass.test.ts',
+            'packages/syncplay/tests/physics3d-materials.test.ts',
+            'packages/syncplay/tests/physics3d-heightfield.test.ts',
+            'packages/syncplay/tests/physics3d-rotation-convention.test.ts',
+            'packages/syncplay/tests/physics3d-mesh-onesided.test.ts',
             'packages/syncplay/tests/engine-complete.test.ts',
             'packages/syncplay/src/physics3d-vehicle.ts',
             'packages/syncplay/tests/physics3d-vehicle.test.ts',
@@ -640,16 +647,17 @@ const engineParityMatrixEntries = [
             'packages/syncplay/src/physics3d-hull.ts',
             'packages/syncplay/tests/physics3d-hull.test.ts',
             'TGS-Soft (sub-stepped soft-constraint) rigid solver: box3d-class stable stacking, tumbling, sleeping, axis locks, joints (ball/hinge/weld/rope/prismatic/spring/grab), opt-in TOI-bound CCD, compound colliders, orientation-aware queries',
-            'extreme-speed CCD (box3d model, src/physics3d-toi.ts): an opt-in ccd body whose per-tick motion exceeds half its smallest extent has its exact first time-of-impact found by GJK conservative advancement; it is advanced there and the impact resolved as a perfectly-inelastic collision (momentum transfers to the struck body — a fast bullet punches through and knocks targets loose, no non-physical stop-dead) with its position TOI-clamped so it never tunnels. A bullet at 60 units/tick into a resting stack or a frame+door cluster stays finite and bounded (fixes the #2821 relax divergence via witness-point contact anchors + a small speculative margin + shared multi-body seam impulse). Linear-sweep + stationary-target scope; glancing bodies slide (not frozen); non-ccd bodies still tunnel (opt-in). physics3d-ccd.test.ts covers momentum-transfer / no-freeze / finite-at-vx60 / rollback + permutation equivalence',
+            'extreme-speed CCD (box3d model, src/physics3d-toi.ts): an opt-in ccd body whose per-tick motion exceeds half its smallest extent has its exact first time-of-impact found by GJK conservative advancement against convex shapes and culled heightfield cell triangles; it is advanced there and the impact resolved as a perfectly-inelastic collision with momentum transfer and a TOI position clamp. physics3d-ccd.test.ts and physics3d-heightfield.test.ts cover finite-at-vx60, heightfield-cliff no-tunnel, rollback, and permutation equivalence',
             'stacking stability gated in CI: tower-15 (<1° tilt), 50:1 mass-ratio column, pyramid, kick-recovery, and a 20-layer stack all meet drift/penetration/up-alignment thresholds with rollback + authoring-order-permutation equivalence',
             'convex-hull collision shape (4–16 verts): deterministic supporting-plane preprocessing, SAT+clip hull-vs-hull/box, closest-point hull-vs-sphere/capsule, support-sample hull-vs-static-mesh, exact ray/overlap/shape-cast queries; golden hull-pair battery pinned',
             'cone-twist ball joint (swing cone + twist limits via fixed-point cosine) drives a 6-body ragdoll that settles kinetically and stays articulated; rigid-wheel vehicle recipe (sphere wheels + hinge motors) certified alongside the raycast controller',
             'builtin-rigid physics-cert lane passes all 4 determinism gates; contact/joint caches are checksummed rollback state',
+            'builtin-rigid@2 certifies true hull/compound inertia and center-of-mass integration, geometric-mean friction, rolling resistance, static heightfields with CCD/query parity, and active spherical motor/orientation-spring rows',
             'raycast-wheel vehicle controller (stepDeterministicVehicle3D): spring-damper suspension, friction-circle drive/steer/brake, fixed-point steering trig, moving-ground reaction (slip relative to the contact body; equal-and-opposite reaction on dynamic ground)',
             'per-world static AABB-tree query index: raycast/overlap/shape-cast are O(log n + hits) with bit-identical results; batched applyDeterministicImpulses3D applies a frame of controller impulses in one canonical rebuild',
             'pooled narrow-phase/constraint scratch (scalarized box face-clip over ping-pong clip slots, step-scoped constraint pool); prismatic/breakable/collision-suppressed joints, a soft frequencyHz/dampingRatio spring joint (breakable/disable-collision), and per-body gravityScale — joint breaks are sticky checksummed cache state',
             'kinematic bodies integrate their authored velocity (linear + angular) inside the solver, drive the dynamic bodies they touch through the contact relative-velocity term, absorb the equal-and-opposite reaction (zero inverse mass), and wake the sleeping piles they push; a kinematic mesh is therefore a moving platform / conveyor collider. A dynamic mesh is rejected at world creation',
-            'one-sided mesh contacts resolve penetration for zero-radius shapes: a support sample projecting onto a triangle face uses its signed plane distance (capped at the sample shape\'s diameter), so a box or hull rests on and is pushed by a mesh instead of falling through it — previously only sphere/capsule (radius-bearing) samples could generate a resolvable mesh contact',
+            'one-sided mesh and heightfield contacts resolve penetration for zero-radius shapes while rejecting genuine back-face approaches; a shallow solver-creep recovery band keeps boxes/hulls resting without ejecting bodies from below',
             'compound colliders accept hull children (packages/syncplay/src/collider-cooking.ts): an offline V-HACD-shaped cooker voxelizes a concave triangle soup, splits it on the axis-aligned plane that best reduces concavity, and emits a compound of ≤16-vert convex hulls that the runtime validates with buildSolverHull. The cook is order-invariant and byte-reproducible (exact integer-lattice convex hull, lexicographic tie-breaks); no decomposition code runs in a simulation step',
         ],
         cliProofs: [
@@ -663,6 +671,7 @@ const engineParityMatrixEntries = [
         gaps: [
             'Mesh-vs-mesh collision remains unsupported by design: a mesh collider is static or kinematic, and a dynamic concave body must be cooked to a compound of hulls (collider:cook).',
             'Kinematic bodies resolve contacts discretely — a kinematic mesh driven faster than its own extent per tick can pass through a thin body (no CCD for kinematic; ccd is a dynamic-body opt-in).',
+            'Dynamic ccd sweeps box, sphere, capsule, hull, and heightfield targets; triangle-soup mesh and compound targets remain discrete-only.',
             'Convex decomposition is offline only: the cooked hull set is conservative (it contains the source, inflated by up to one voxel of the chosen resolution) and hulls stay capped at 16 verts.',
         ],
         nextCliWork: [

package/dist/cjs/engine-parity.js

@@ -767,7 +767,7 @@ function runPhysicsCategory(config) {
             && physics3DQueries.overlapCovered
             && physics3DQueries.shapeCastCovered,
         physics3DMaterialResponse: physics3DMaterials.rollbackEquivalent
-            && physics3DMaterials.combinedFriction === 3
+            && Math.abs(physics3DMaterials.combinedFriction - 0.28284271) < 1e-6
             && physics3DMaterials.combinedRestitution === 7
             && physics3DMaterials.normalVelocityAfterBounce < 0,
         physics3DDetailedQueriesAndContacts: physics3DDetails.rollbackEquivalent

package/dist/cjs/index.js

@@ -5,7 +5,7 @@ exports.createDeterministicCommandTimelineSnapshot = exports.createDeterministic
 exports.createDeterministicLocalAuthorityCorrectionEnvelope = exports.createDeterministicLocalAuthorityCommandBundleEnvelope = exports.createDeterministicLocalAuthorityAckEnvelope = exports.applyDeterministicLocalAuthorityInputBundleEnvelope = exports.applyDeterministicLocalAuthorityCommandBundleEnvelope = exports.createDeterministicLocalAuthorityRuntime = exports.validateDeterministicLagCompensatedShot3D = exports.validateDeterministicAuthoritativeLagCompensatedShot3D = exports.rewindDeterministicLagCompensatedTargets3D = exports.createDeterministicLagCompensation3DHistory = exports.buildDeterministicLagCompensatedHitboxProxies3D = exports.sortDeterministicInputTimelineFlags = exports.evaluateDeterministicInputTimelineResult = exports.accumulateDeterministicInputTimelineState = exports.createInputAuthority = exports.filterDeterministicEventsForPlayer = exports.createDeterministicEventTimeline = exports.SyncplayError = exports.validateDeterministicFrameSystemsStateless = exports.runDeterministicFrameRuntimeMutationCorpus = exports.isDeterministicFrameHeapStaleHandleError = exports.generateDeterministicFrameRuntimeSource = exports.createDeterministicSparseSetFrameRuntime = exports.createDeterministicSlotMap = exports.createDeterministicFrameRuntimeAccessors = exports.createDeterministicFrameRuntime = exports.createDeterministicBitset = exports.compileDeterministicDslRuntimeDescriptor = exports.assertDeterministicFrameSystemsStateless = exports.assertDeterministicFrameHeapStaleHandleError = exports.stableDeterministicEngineCompleteJson = exports.runDeterministicEngineCompleteSuite = exports.engineCompleteExecutionProofHash = exports.createDeterministicEventEffectsAdapter = exports.createEcsLiteWorld = exports.verifyDeterministicSessionRuntimeReplay = exports.createDeterministicSessionReplayBundle = exports.createDeterministicSessionCore = exports.stepTopDownBody = exports.stepKccLiteBody = exports.quantizeFpsAim = exports.detectVerticalCcdHit = exports.cookStaticColliders = exports.combineDeterministicPhysicsMaterial = exports.verifyDeterministicConfigBundle = exports.summarizeDeterministicConfigBundleFailureReasons = exports.evaluateDeterministicConfigBundleParityResult = exports.cookDeterministicConfigBundle = exports.evaluateDeterministicCommandTimelineMigrationResult = exports.deterministicPayloadMatchesFields = void 0;
 exports.queryDeterministicPhysicsShapeOverlap2D = exports.queryDeterministicPhysicsAabb2D = exports.nearestDeterministicPhysicsHit2D = exports.createDeterministicPhysicsWorld2D = exports.circleCastDeterministicPhysics2D = exports.createOfflineSession = exports.valueNoise2D = exports.valueNoise1D = exports.hashUint32 = exports.hash2 = exports.fbm2D = exports.createNetworkedSyncplayClient = exports.stepDeterministicNavmeshOffMeshTraversal = exports.stepDeterministicNavmeshAgents = exports.smoothDeterministicNavmeshPath = exports.runDeterministicNavmeshStress = exports.locateDeterministicNavmeshPolygon = exports.findDeterministicNavmeshPointPath = exports.findDeterministicNavmeshPath = exports.cookImportedDeterministicNavmesh = exports.cookDeterministicNavmesh = exports.stepDeterministicNavigationAgents = exports.smoothDeterministicPath = exports.findDeterministicPath = exports.createDeterministicFlowField = exports.cookTilemapNavigationGraph = exports.cookDeterministicNavigationGraph = exports.applyDeterministicReciprocalAvoidance = exports.stepDeterministicKcc3D = exports.stepDeterministicCarry3D = exports.validateDeterministicLagCompensatedHit = exports.stepDeterministicTopDownMover = exports.stepDeterministicKcc2D = exports.stepDeterministicFpsAim = exports.runDeterministicMovementSimulation = exports.runDeterministicMovementCrowdSimulation = exports.rewindDeterministicTargets = exports.createDeterministicMath = exports.encodeDeterministicLocalAuthorityWireEnvelope = exports.deterministicLocalAuthorityWireProtocol = exports.decodeDeterministicLocalAuthorityWireEnvelope = exports.createDeterministicLocalAuthorityWireReceiver = exports.createDeterministicLocalAuthorityWireAuth = exports.createDeterministicLocalAuthoritySnapshotTransfer = exports.createDeterministicLocalAuthoritySnapshotRequestEnvelope = exports.createDeterministicLocalAuthoritySnapshotOfferEnvelope = exports.createDeterministicLocalAuthoritySnapshotEnvelope = exports.createDeterministicLocalAuthoritySnapshotCompleteEnvelope = exports.createDeterministicLocalAuthoritySnapshotChunkEnvelope = exports.createDeterministicLocalAuthorityInputBundleEnvelope = void 0;
 exports.diffDeterministicReports = exports.createProtocolRollbackReport = exports.verifyScoredReplay = exports.stableFrameDumpJson = exports.stableFrameDiffJson = exports.inspectReplayFrameWithDescriptor = exports.inspectReplayFrame = exports.explainReplayChecksum = exports.diffReplayFrames = exports.verifyReplayScoreAgainstTrustedRuntime = exports.verifyDeterministicSelfContainedFrameRuntimeReplayBundle = exports.verifyDeterministicReplayBundle = exports.verifyDeterministicFrameRuntimeReplayBundle = exports.sliceDeterministicReplayBundle = exports.minimizeDeterministicReplayDesyncBundle = exports.minimizeDeterministicReplayDesync = exports.createDeterministicReplayRuntimeManifest = exports.createDeterministicReplayDebugTables = exports.createDeterministicReplayBundle = exports.verifyReplayWithDescriptor = exports.verifyReplay = exports.DeterministicRandom = exports.interpolateDeterministicRenderVec2 = exports.interpolateDeterministicRenderNumber = exports.createDeterministicR3fRenderAdapter = exports.createDeterministicR3fDebugOverlay = exports.stepDeterministicVehicle3D = exports.runDeterministicTower3DScenario = exports.runDeterministicStackingSuite3D = exports.runDeterministicPyramid3DScenario = exports.runDeterministicMassRatio3DScenario = exports.runDeterministicKickRecovery3DScenario = exports.stepDeterministicPhysicsWorld3D = exports.shapeCastDeterministicPhysics3DDetailed = exports.shapeCastDeterministicPhysics3D = exports.setDeterministicBodyVelocity3D = exports.runDeterministicPhysics3DStress = exports.raycastDeterministicPhysics3DDetailed = exports.raycastDeterministicPhysics3D = exports.overlapDeterministicPhysics3D = exports.deterministicPhysicsCallback3D = exports.deterministicPhysicsBodyById3D = exports.deriveInverseInertia = exports.createDeterministicPhysicsWorld3D = exports.contactDetailsDeterministicPhysics3D = exports.applyDeterministicImpulses3D = exports.applyDeterministicImpulse3D = exports.stepDeterministicPhysicsWorld2D = exports.raycastDeterministicPhysics2D = exports.raycastAllDeterministicPhysics2D = void 0;
-exports.tickCooldown = exports.scheduleFrameEvent = exports.popDueFrameEvents = exports.millisecondsToFrames = exports.framesToMilliseconds = exports.createCooldown = exports.summarizeDeterministicLifecycleCounters = exports.createDeterministicLifecycleRunner = exports.createDeterministicSparseSet = exports.createDeterministicSignalBus = exports.encodeDeterministicSessionMessage = exports.deterministicSessionWireVersion = exports.decodeDeterministicSessionMessage = exports.encodeDeterministicStateSnapshot = exports.deterministicRoomDescriptorHash = exports.DEFAULT_SNAPSHOT_CHUNK_SIZE = exports.DEFAULT_MAX_SNAPSHOT_BYTES = exports.decodeDeterministicStateSnapshot = exports.createSnapshotTransferFromBytes = exports.createSnapshotTransferCollector = exports.bytesToBase64 = exports.base64ToBytes = exports.createSyncplayOfflineRuntime = exports.stableDeterministicDslSchemaJson = exports.parseDeterministicSchemaDsl = exports.deterministicDslMaxPlayers = exports.createDeterministicBinarySerializer = exports.proveSchemaBinaryRoundTrip = exports.generateSchemaTypes = exports.generateSchemaBinarySource = exports.createDeterministicDescriptorBinarySchema = exports.createSchemaArtifacts = exports.stableDescriptorId = exports.defineSyncplayGame = exports.withRuntimeDeterminismGuards = exports.createDeterministicRollbackHistory = exports.stableReportJson = exports.stableReportDiffJson = exports.renderDeterministicReportHtml = void 0;
+exports.createSyncplaySecretsClient = exports.createSyncplaySecretEventReader = exports.createSyncplaySecretAuthority = exports.verifySyncplaySignedReceipt = exports.createBrowserSyncplaySecretCrypto = exports.syncplaySecretProtocol = exports.isSyncplaySecretCommand = exports.decodeSyncplaySecretPrivateMessage = exports.validateSyncplaySecretSystemsConfig = exports.syncplaySecretLimits = exports.syncplaySecretConfigHash = exports.tickCooldown = exports.scheduleFrameEvent = exports.popDueFrameEvents = exports.millisecondsToFrames = exports.framesToMilliseconds = exports.createCooldown = exports.summarizeDeterministicLifecycleCounters = exports.createDeterministicLifecycleRunner = exports.createDeterministicSparseSet = exports.createDeterministicSignalBus = exports.encodeDeterministicSessionMessage = exports.deterministicSessionWireVersion = exports.decodeDeterministicSessionMessage = exports.encodeDeterministicStateSnapshot = exports.deterministicRoomDescriptorHash = exports.DEFAULT_SNAPSHOT_CHUNK_SIZE = exports.DEFAULT_MAX_SNAPSHOT_BYTES = exports.decodeDeterministicStateSnapshot = exports.createSnapshotTransferFromBytes = exports.createSnapshotTransferCollector = exports.bytesToBase64 = exports.base64ToBytes = exports.createSyncplayOfflineRuntime = exports.stableDeterministicDslSchemaJson = exports.parseDeterministicSchemaDsl = exports.deterministicDslMaxPlayers = exports.createDeterministicBinarySerializer = exports.proveSchemaBinaryRoundTrip = exports.generateSchemaTypes = exports.generateSchemaBinarySource = exports.createDeterministicDescriptorBinarySchema = exports.createSchemaArtifacts = exports.stableDescriptorId = exports.defineSyncplayGame = exports.withRuntimeDeterminismGuards = exports.createDeterministicRollbackHistory = exports.stableReportJson = exports.stableReportDiffJson = exports.renderDeterministicReportHtml = void 0;
 var animation_js_1 = require("./animation.js");
 Object.defineProperty(exports, "cookDeterministicAnimation", { enumerable: true, get: function () { return animation_js_1.cookDeterministicAnimation; } });
 Object.defineProperty(exports, "createDeterministicAnimationRuntimeState", { enumerable: true, get: function () { return animation_js_1.createDeterministicAnimationRuntimeState; } });
@@ -300,3 +300,19 @@ Object.defineProperty(exports, "millisecondsToFrames", { enumerable: true, get:
 Object.defineProperty(exports, "popDueFrameEvents", { enumerable: true, get: function () { return timers_js_1.popDueFrameEvents; } });
 Object.defineProperty(exports, "scheduleFrameEvent", { enumerable: true, get: function () { return timers_js_1.scheduleFrameEvent; } });
 Object.defineProperty(exports, "tickCooldown", { enumerable: true, get: function () { return timers_js_1.tickCooldown; } });
+var secret_config_js_1 = require("./secret-config.js");
+Object.defineProperty(exports, "syncplaySecretConfigHash", { enumerable: true, get: function () { return secret_config_js_1.syncplaySecretConfigHash; } });
+Object.defineProperty(exports, "syncplaySecretLimits", { enumerable: true, get: function () { return secret_config_js_1.syncplaySecretLimits; } });
+Object.defineProperty(exports, "validateSyncplaySecretSystemsConfig", { enumerable: true, get: function () { return secret_config_js_1.validateSyncplaySecretSystemsConfig; } });
+var secret_protocol_js_1 = require("./secret-protocol.js");
+Object.defineProperty(exports, "decodeSyncplaySecretPrivateMessage", { enumerable: true, get: function () { return secret_protocol_js_1.decodeSyncplaySecretPrivateMessage; } });
+Object.defineProperty(exports, "isSyncplaySecretCommand", { enumerable: true, get: function () { return secret_protocol_js_1.isSyncplaySecretCommand; } });
+Object.defineProperty(exports, "syncplaySecretProtocol", { enumerable: true, get: function () { return secret_protocol_js_1.syncplaySecretProtocol; } });
+var secret_crypto_js_1 = require("./secret-crypto.js");
+Object.defineProperty(exports, "createBrowserSyncplaySecretCrypto", { enumerable: true, get: function () { return secret_crypto_js_1.createBrowserSyncplaySecretCrypto; } });
+Object.defineProperty(exports, "verifySyncplaySignedReceipt", { enumerable: true, get: function () { return secret_crypto_js_1.verifySyncplaySignedReceipt; } });
+var secret_authority_js_1 = require("./secret-authority.js");
+Object.defineProperty(exports, "createSyncplaySecretAuthority", { enumerable: true, get: function () { return secret_authority_js_1.createSyncplaySecretAuthority; } });
+var secret_client_js_1 = require("./secret-client.js");
+Object.defineProperty(exports, "createSyncplaySecretEventReader", { enumerable: true, get: function () { return secret_client_js_1.createSyncplaySecretEventReader; } });
+Object.defineProperty(exports, "createSyncplaySecretsClient", { enumerable: true, get: function () { return secret_client_js_1.createSyncplaySecretsClient; } });

package/dist/cjs/input-authority.js

@@ -10,6 +10,7 @@ function createInputAuthority(config) {
     const maxFutureTicks = config.maxFutureTicks ?? Number.POSITIVE_INFINITY;
     const retainedConfirmedFrames = config.retainedConfirmedFrames ?? 512;
     const pending = new Map();
+    const pendingCommands = new Map();
     const lastConfirmedInput = Array.from({ length: playerCount }, () => config.neutralInput);
     const retained = new Map();
     let confirmedThrough = -1;
@@ -22,7 +23,7 @@ function createInputAuthority(config) {
             const frame = frames[index];
             (0, errors_js_1.invariant)(Number.isInteger(frame.tick) && (index === 0 || frame.tick === frames[index - 1].tick + 1), 'restoreFrom frames must be tick-contiguous', 'input-authority.restore-gap');
             (0, errors_js_1.invariant)(frame.inputs.length === playerCount, 'restoreFrom frame inputs must cover every player slot', 'input-authority.restore-inputs');
-            retained.set(frame.tick, frame);
+            retained.set(frame.tick, (0, canonical_js_1.cloneCanonical)(frame));
         }
         (0, errors_js_1.invariant)(frames[frames.length - 1].tick === restoredThrough, 'restoreFrom frames must end at the restored frontier', 'input-authority.restore-frontier');
         earliestRetained = frames[0].tick;
@@ -75,11 +76,16 @@ function createInputAuthority(config) {
             }
         }
         pending.delete(tick);
+        const commands = (pendingCommands.get(tick) ?? [])
+            .map((command) => (0, canonical_js_1.cloneCanonical)(command))
+            .sort(compareAuthorityCommands);
+        pendingCommands.delete(tick);
         const frame = {
             tick,
             inputs,
             substitutedSlots,
-            checksum: String((0, canonical_js_1.defaultChecksum)({ tick, inputs })),
+            ...(commands.length === 0 ? {} : { commands }),
+            checksum: String((0, canonical_js_1.defaultChecksum)(commands.length === 0 ? { tick, inputs } : { tick, inputs, commands })),
         };
         retained.set(tick, frame);
         if (earliestRetained === -1) {
@@ -116,6 +122,13 @@ function createInputAuthority(config) {
             return confirmedThrough;
         },
         receiveInput,
+        queueCommand(tick, command) {
+            (0, errors_js_1.invariant)(Number.isInteger(tick) && tick >= 0, 'command tick must be a non-negative integer', 'input-authority.command-tick');
+            (0, errors_js_1.invariant)(tick > confirmedThrough, `command tick ${tick} is already confirmed`, 'input-authority.command-confirmed');
+            const commands = pendingCommands.get(tick) ?? [];
+            commands.push((0, canonical_js_1.cloneCanonical)(command));
+            pendingCommands.set(tick, commands);
+        },
         advance,
         get earliestRetainedTick() {
             return earliestRetained;
@@ -148,3 +161,22 @@ function createInputAuthority(config) {
         },
     };
 }
+function compareAuthorityCommands(left, right) {
+    const leftRecord = isCanonicalRecord(left) ? left : undefined;
+    const rightRecord = isCanonicalRecord(right) ? right : undefined;
+    const leftSystem = typeof leftRecord?.systemId === 'string' ? leftRecord.systemId : '';
+    const rightSystem = typeof rightRecord?.systemId === 'string' ? rightRecord.systemId : '';
+    const systemOrder = compareCanonicalText(leftSystem, rightSystem);
+    if (systemOrder !== 0)
+        return systemOrder;
+    const leftRequest = typeof leftRecord?.requestId === 'string' ? leftRecord.requestId : '';
+    const rightRequest = typeof rightRecord?.requestId === 'string' ? rightRecord.requestId : '';
+    const requestOrder = compareCanonicalText(leftRequest, rightRequest);
+    return requestOrder !== 0 ? requestOrder : compareCanonicalText((0, canonical_js_1.canonicalStringify)(left), (0, canonical_js_1.canonicalStringify)(right));
+}
+function compareCanonicalText(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function isCanonicalRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}