@tldraw/sync-core 5.3.0-internal.fba91ed55f6c → 5.3.0-next.2fa9c61a8de6

package/dist-cjs/index.d.ts

@@ -663,8 +663,11 @@ export declare type TLPresenceMode =
  * @public
  */
 export declare type TLRecordAuthorizer<Rec extends UnknownRecord, SessionMeta> = (args: {
-    /** The session performing the write, including its host-provided `meta` (e.g. the authenticated user id). */
+    /** The session performing the write: its host-provided `meta` (e.g. the authenticated user
+     *  id) and the canvas-lane `isReadonly` state, for hosts whose object-lane policy follows
+     *  canvas access. */
     session: {
+        isReadonly: boolean;
         meta: SessionMeta;
         sessionId: string;
     };

package/dist-cjs/index.js

@@ -61,7 +61,7 @@ var import_TLSyncRoom = require("./lib/TLSyncRoom");
 var import_TLSyncStorage = require("./lib/TLSyncStorage");
 (0, import_utils.registerTldrawLibraryVersion)(
   "@tldraw/sync-core",
-  "5.3.0-internal.fba91ed55f6c",
+  "5.3.0-next.2fa9c61a8de6",
   "cjs"
 );
 //# sourceMappingURL=index.js.map

package/dist-cjs/lib/TLSyncRoom.js

@@ -886,30 +886,38 @@ class TLSyncRoom {
                   );
                 }
                 const record = op[1];
+                const prevRecord = session ? txn.get(id) ?? null : null;
+                if (session && prevRecord && prevRecord.typeName !== record.typeName) {
+                  this.log?.warn?.(
+                    "skipping put that changes typeName",
+                    `${prevRecord.typeName} -> ${record.typeName}`,
+                    id,
+                    "session:",
+                    session.sessionId
+                  );
+                  continue;
+                }
                 let authorize;
                 if (session && this.authorizeRecord) {
-                  const prev = txn.get(id) ?? null;
-                  if (prev && prev.typeName !== record.typeName) {
-                    this.log?.warn?.(
-                      "skipping put that changes typeName",
-                      `${prev.typeName} -> ${record.typeName}`,
-                      id,
-                      "session:",
-                      session.sessionId
-                    );
-                    continue;
-                  }
                   const authorizePut = this.authorizerFor(record.typeName);
                   if (authorizePut) {
                     authorize = (prevRec, next) => {
                       const result2 = authorizePut(
                         prevRec ? {
-                          session: { sessionId: session.sessionId, meta: session.meta },
+                          session: {
+                            sessionId: session.sessionId,
+                            isReadonly: session.isReadonly,
+                            meta: session.meta
+                          },
                           type: "update",
                           prev: prevRec,
                           next
                         } : {
-                          session: { sessionId: session.sessionId, meta: session.meta },
+                          session: {
+                            sessionId: session.sessionId,
+                            isReadonly: session.isReadonly,
+                            meta: session.meta
+                          },
                           type: "create",
                           prev: null,
                           next
@@ -939,7 +947,11 @@ class TLSyncRoom {
                 const authorizePatch = session && this.authorizerFor(doc.typeName);
                 const authorize = authorizePatch ? (prev, next) => {
                   const result2 = authorizePatch({
-                    session: { sessionId: session.sessionId, meta: session.meta },
+                    session: {
+                      sessionId: session.sessionId,
+                      isReadonly: session.isReadonly,
+                      meta: session.meta
+                    },
                     type: "update",
                     prev,
                     next
@@ -966,7 +978,11 @@ class TLSyncRoom {
                 if (!canWrite(doc.typeName)) continue;
                 const authorizeRemove = session && this.authorizerFor(doc.typeName);
                 if (authorizeRemove && !authorizeRemove({
-                  session: { sessionId: session.sessionId, meta: session.meta },
+                  session: {
+                    sessionId: session.sessionId,
+                    isReadonly: session.isReadonly,
+                    meta: session.meta
+                  },
                   type: "delete",
                   prev: doc,
                   next: null

package/dist-cjs/lib/TLSyncRoom.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/TLSyncRoom.ts"],
-  "sourcesContent": ["import {\n\tAtomMap,\n\tMigrationFailureReason,\n\tRecordType,\n\tSerializedSchema,\n\tStoreSchema,\n\tUnknownRecord,\n} from '@tldraw/store'\nimport {\n\tassert,\n\tassertExists,\n\texhaustiveSwitchError,\n\tgetOwnProperty,\n\tisEqual,\n\tisNativeStructuredClone,\n\tobjectMapEntriesIterable,\n\tResult,\n\tthrottle,\n} from '@tldraw/utils'\nimport { createNanoEvents } from 'nanoevents'\nimport {\n\tapplyObjectDiff,\n\tdiffRecord,\n\tNetworkDiff,\n\tObjectDiff,\n\tRecordOp,\n\tRecordOpType,\n\tValueOpType,\n} from './diff'\nimport { interval } from './interval'\nimport {\n\tgetTlsyncProtocolVersion,\n\tTLIncompatibilityReason,\n\tTLObjectStoreAccess,\n\tTLSocketClientSentEvent,\n\tTLSocketServerSentDataEvent,\n\tTLSocketServerSentEvent,\n} from './protocol'\nimport { applyAndDiffRecord, diffAndValidateRecord, validateRecord } from './recordDiff'\nimport {\n\tRoomSession,\n\tRoomSessionState,\n\tSESSION_IDLE_TIMEOUT,\n\tSESSION_REMOVAL_WAIT_TIME,\n\tSESSION_START_WAIT_TIME,\n} from './RoomSession'\nimport { TLSyncLog } from './TLSocketRoom'\nimport { TLSyncError, TLSyncErrorCloseEventCode, TLSyncErrorCloseEventReason } from './TLSyncClient'\nimport {\n\tTLSyncForwardDiff,\n\tTLSyncStorage,\n\tTLSyncStorageTransaction,\n\ttoNetworkDiff,\n} from './TLSyncStorage'\n\n/**\n * WebSocket interface for server-side room connections. This defines the contract\n * that socket implementations must follow to work with TLSyncRoom.\n *\n * @internal\n */\nexport interface TLRoomSocket<R extends UnknownRecord> {\n\t/**\n\t * Whether the socket connection is currently open and ready to send messages.\n\t */\n\tisOpen: boolean\n\t/**\n\t * Send a message to the connected client through this socket.\n\t *\n\t * @param msg - The server-sent event message to transmit\n\t */\n\tsendMessage(msg: TLSocketServerSentEvent<R>): void\n\t/**\n\t * Close the socket connection with optional status code and reason.\n\t *\n\t * @param code - WebSocket close code (optional)\n\t * @param reason - Human-readable close reason (optional)\n\t */\n\tclose(code?: number, reason?: string): void\n}\n\n/**\n * The minimum time interval (in milliseconds) between sending batched data messages\n * to clients. This debouncing prevents overwhelming clients with rapid updates.\n * @public\n */\nexport const DATA_MESSAGE_DEBOUNCE_INTERVAL = 1000 / 60\n\nconst timeSince = (time: number) => Date.now() - time\n\n/**\n * Snapshot of a room's complete state that can be persisted and restored.\n * Contains all documents, tombstones, and metadata needed to reconstruct the room.\n *\n * @public\n */\nexport interface RoomSnapshot {\n\t/**\n\t * The current logical clock value for the room\n\t */\n\tclock?: number\n\t/**\n\t * Clock value when document data was last changed (optional for backwards compatibility)\n\t */\n\tdocumentClock?: number\n\t/**\n\t * Array of all document records with their last modification clocks\n\t */\n\tdocuments: Array<{ state: UnknownRecord; lastChangedClock: number }>\n\t/**\n\t * Map of deleted record IDs to their deletion clock values (optional)\n\t */\n\ttombstones?: Record<string, number>\n\t/**\n\t * Clock value where tombstone history begins - older deletions are not tracked (optional)\n\t */\n\ttombstoneHistoryStartsAtClock?: number\n\t/**\n\t * Serialized schema used when creating this snapshot (optional)\n\t */\n\tschema?: SerializedSchema\n}\n\n/**\n * Authorizes a single record write from a client: any per-record, per-session rule the host wants\n * to enforce server-side \u2014 veto writes the session isn't allowed to make, or rewrite the record on\n * create. The session's `meta` carries whatever the rule needs (identity, roles, \u2026); for example,\n * force a comment's `authorId` to the signed-in user so nobody can post in someone else's name.\n *\n * Called on **create**, **update**, and **delete** of records whose `typeName` it's registered for\n * (see {@link TLRecordAuthorizers}), and only for client pushes \u2014 never for server-initiated writes.\n *\n * `prev` and `next` are always at the **server's** schema version: client writes are migrated\n * before the authorizer runs, so guarding or stamping a field never requires knowing what older\n * clients call it. On create, the record you return is what gets stored (after validation) \u2014 no\n * migration runs afterwards, so stamped fields can't be clobbered.\n *\n * Return `null` to reject the write \u2014 it's skipped and the client self-corrects, exactly like the\n * `objectAccess` gate. Otherwise the write is allowed, and:\n *\n * - on **create**, the record you return is what gets stored, so stamp identity fields here (e.g.\n *   set `authorId` from `session.meta`);\n * - on **update** and **delete**, only allow-vs-reject is used (the returned record's contents are\n *   ignored), so use them to veto changes to immutable fields or unauthorized deletes \u2014 return\n *   `next`/`prev` to allow, `null` to reject.\n *\n * \u26A0\uFE0E Runs synchronously inside the commit transaction, on the same path as every document edit \u2014 it\n * must be fast and do **no** I/O. `next`/`prev` are client-controlled records, so treat their\n * contents as untrusted; prefer returning `null` to reject over throwing, though a throw is\n * caught, logged, and treated as a rejection (fail closed) rather than crashing the push. For\n * expensive, async checks (e.g. resolving mentions against who can access a file), react after the\n * fact via `onCommittedChanges`.\n *\n * @public\n */\nexport type TLRecordAuthorizer<Rec extends UnknownRecord, SessionMeta> = (\n\targs: {\n\t\t/** The session performing the write, including its host-provided `meta` (e.g. the authenticated user id). */\n\t\tsession: { sessionId: string; meta: SessionMeta }\n\t} & (\n\t\t| { type: 'create'; prev: null; next: Rec }\n\t\t| { type: 'update'; prev: Rec; next: Rec }\n\t\t| { type: 'delete'; prev: Rec; next: null }\n\t)\n) => Rec | null\n\n/**\n * A map from record `typeName` to a {@link TLRecordAuthorizer} for that record type. Only listed\n * types are authorized; every other record writes through untouched, so this stays off the hot path\n * for the vast majority of writes (shape drags etc.).\n *\n * Each authorizer is typed to its record \u2014 e.g. `next` in the `comment` entry is a `TLComment` \u2014 so\n * renaming a field on the record makes the authorizer that reads it fail to compile, rather than\n * silently stamp or guard the wrong field.\n *\n * Presence records are never authorized (presence is per-session and ephemeral); registering the\n * presence typeName is a construction-time error.\n *\n * @public\n */\nexport type TLRecordAuthorizers<R extends UnknownRecord, SessionMeta> = {\n\t[K in R['typeName']]?: TLRecordAuthorizer<Extract<R, { typeName: K }>, SessionMeta>\n}\n\n/**\n * A collaborative workspace that manages multiple client sessions and synchronizes\n * document changes between them. The room serves as the authoritative source for\n * all document state and handles conflict resolution, schema migrations, and\n * real-time data distribution.\n *\n * @example\n * ```ts\n * const room = new TLSyncRoom({\n *   schema: mySchema,\n *   onDataChange: () => saveToDatabase(room.getSnapshot()),\n *   onPresenceChange: () => updateLiveCursors()\n * })\n *\n * // Handle new client connections\n * room.handleNewSession({\n *   sessionId: 'user-123',\n *   socket: webSocketAdapter,\n *   meta: { userId: '123', name: 'Alice' },\n *   isReadonly: false\n * })\n * ```\n *\n * @internal\n */\nexport class TLSyncRoom<R extends UnknownRecord, SessionMeta> {\n\t// A table of connected clients\n\treadonly sessions = new Map<string, RoomSession<R, SessionMeta>>()\n\n\tprivate lastDocumentClock = 0\n\n\tprivate pruneTimer: ReturnType<typeof setTimeout> | null = null\n\n\tpruneSessions = throttle(() => {\n\t\tif (this.pruneTimer) {\n\t\t\tclearTimeout(this.pruneTimer)\n\t\t\tthis.pruneTimer = null\n\t\t}\n\t\tfor (const client of this.sessions.values()) {\n\t\t\tswitch (client.state) {\n\t\t\t\tcase RoomSessionState.Connected: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.lastInteractionTime) > this.sessionIdleTimeout\n\t\t\t\t\tif (hasTimedOut || !client.socket.isOpen) {\n\t\t\t\t\t\tthis.cancelSession(client.sessionId)\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tcase RoomSessionState.AwaitingConnectMessage: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.sessionStartTime) > SESSION_START_WAIT_TIME\n\t\t\t\t\tif (hasTimedOut || !client.socket.isOpen) {\n\t\t\t\t\t\t// remove immediately\n\t\t\t\t\t\tthis.removeSession(client.sessionId)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tthis.scheduleFollowUpPrune()\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tcase RoomSessionState.AwaitingRemoval: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.cancellationTime) > SESSION_REMOVAL_WAIT_TIME\n\t\t\t\t\tif (hasTimedOut) {\n\t\t\t\t\t\tthis.removeSession(client.sessionId)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tthis.scheduleFollowUpPrune()\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tdefault: {\n\t\t\t\t\texhaustiveSwitchError(client)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}, 1000)\n\n\tprivate scheduleFollowUpPrune() {\n\t\tif (this.pruneTimer) return\n\t\tthis.pruneTimer = setTimeout(this.pruneSessions, SESSION_REMOVAL_WAIT_TIME + 100)\n\t}\n\n\treadonly presenceStore = new PresenceStore<R>()\n\n\tprivate disposables: Array<() => void> = []\n\n\tprivate _isClosed = false\n\n\t/**\n\t * Close the room and clean up all resources. Disconnects all sessions\n\t * and stops background processes.\n\t */\n\tclose() {\n\t\tthis.disposables.forEach((d) => d())\n\t\tthis.sessions.forEach((session) => {\n\t\t\tsession.socket.close()\n\t\t})\n\t\tthis._isClosed = true\n\t}\n\n\t/**\n\t * Check if the room has been closed and is no longer accepting connections.\n\t *\n\t * @returns True if the room is closed\n\t */\n\tisClosed() {\n\t\treturn this._isClosed\n\t}\n\n\treadonly events = createNanoEvents<{\n\t\troom_became_empty(): void\n\t\tsession_removed(args: { sessionId: string; meta: SessionMeta }): void\n\t}>()\n\n\t// Storage layer for documents, tombstones, and clocks\n\tprivate readonly storage: TLSyncStorage<R>\n\n\treadonly serializedSchema: SerializedSchema\n\n\treadonly documentTypes: Set<string>\n\t/**\n\t * Record types served by the object-store lane. Object records ride the same wire messages\n\t * as document records but are gated by the session's `objectAccess` instead of `isReadonly`,\n\t * and are excluded from `documentTypes` so hosts can persist them in a separate lane.\n\t */\n\treadonly objectTypes: Set<string>\n\treadonly presenceType: RecordType<R, any> | null\n\tprivate log?: TLSyncLog\n\tpublic readonly schema: StoreSchema<R, any>\n\tprivate onPresenceChange?(): void\n\tprivate onCommittedChanges?(args: { diff: TLSyncForwardDiff<R>; documentClock: number }): void\n\tprivate readonly authorizeRecord?: TLRecordAuthorizers<R, SessionMeta>\n\tprivate readonly sessionIdleTimeout: number\n\n\t/**\n\t * The authorizer registered for a record type, widened to the room's record union. Each entry in\n\t * `authorizeRecord` is typed to its specific record; the cast here is the one place we can't\n\t * statically correlate a runtime `typeName` with its record type, so it lives in the library\n\t * rather than in every consumer.\n\t */\n\tprivate authorizerFor(typeName: R['typeName']): TLRecordAuthorizer<R, SessionMeta> | undefined {\n\t\tconst authorize = this.authorizeRecord?.[typeName] as\n\t\t\t| TLRecordAuthorizer<R, SessionMeta>\n\t\t\t| undefined\n\t\tif (!authorize) return undefined\n\t\t// Fail closed: an authorizer that throws rejects the write (and is logged) rather than\n\t\t// aborting the whole push. Authorizers are security-sensitive, so a bug must never let a\n\t\t// write through.\n\t\treturn (args) => {\n\t\t\ttry {\n\t\t\t\treturn authorize(args)\n\t\t\t} catch (e) {\n\t\t\t\tthis.log?.error?.('record authorizer threw; rejecting the write', e)\n\t\t\t\treturn null\n\t\t\t}\n\t\t}\n\t}\n\n\tconstructor(opts: {\n\t\tlog?: TLSyncLog\n\t\tschema: StoreSchema<R, any>\n\t\tonPresenceChange?(): void\n\t\t/**\n\t\t * Called once after a client push commits, with the committed document diff. Fires for\n\t\t * local and remote pushes. Use this to react to document changes (e.g. persist certain\n\t\t * record types to a separate lane, or project them to an external store) as soon as they\n\t\t * commit. Best-effort \u2014 do not throw; do not block.\n\t\t */\n\t\tonCommittedChanges?(args: { diff: TLSyncForwardDiff<R>; documentClock: number }): void\n\t\t/**\n\t\t * Record type names to serve through the object-store lane instead of the document lane.\n\t\t * Each must be a document-scoped type registered in the schema. Object-lane writes are\n\t\t * gated per session by `objectAccess` rather than `isReadonly`.\n\t\t */\n\t\tobjectTypes?: readonly string[]\n\t\t/**\n\t\t * Per-type authorizers for client record writes (create, update, delete): veto or, on\n\t\t * create, rewrite. See {@link TLRecordAuthorizers}.\n\t\t */\n\t\tauthorizeRecord?: TLRecordAuthorizers<R, SessionMeta>\n\t\tstorage: TLSyncStorage<R>\n\t\tclientTimeout?: number\n\t}) {\n\t\tthis.schema = opts.schema\n\t\tthis.log = opts.log\n\t\tthis.onPresenceChange = opts.onPresenceChange\n\t\tthis.onCommittedChanges = opts.onCommittedChanges\n\t\tthis.authorizeRecord = opts.authorizeRecord\n\t\tthis.storage = opts.storage\n\t\tthis.sessionIdleTimeout = opts.clientTimeout ?? SESSION_IDLE_TIMEOUT\n\n\t\tassert(\n\t\t\tisNativeStructuredClone,\n\t\t\t'TLSyncRoom is supposed to run either on Cloudflare Workers' +\n\t\t\t\t'or on a 18+ version of Node.js, which both support the native structuredClone API'\n\t\t)\n\n\t\t// do a json serialization cycle to make sure the schema has no 'undefined' values\n\t\tthis.serializedSchema = JSON.parse(JSON.stringify(this.schema.serialize()))\n\n\t\tthis.objectTypes = new Set(opts.objectTypes ?? [])\n\t\tfor (const typeName of this.objectTypes) {\n\t\t\tconst type = getOwnProperty(this.schema.types, typeName)\n\t\t\tassert(type, `TLSyncRoom: object type '${typeName}' is not registered in the schema`)\n\t\t\tassert(\n\t\t\t\ttype.scope === 'document',\n\t\t\t\t`TLSyncRoom: object type '${typeName}' must have scope 'document', got '${type.scope}'`\n\t\t\t)\n\t\t}\n\n\t\t// object-lane types are partitioned out of the document lane\n\t\tthis.documentTypes = new Set(\n\t\t\tObject.values<RecordType<R, any>>(this.schema.types)\n\t\t\t\t.filter((t) => t.scope === 'document' && !this.objectTypes.has(t.typeName))\n\t\t\t\t.map((t) => t.typeName)\n\t\t)\n\n\t\tconst presenceTypes = new Set(\n\t\t\tObject.values<RecordType<R, any>>(this.schema.types).filter((t) => t.scope === 'presence')\n\t\t)\n\n\t\tif (presenceTypes.size > 1) {\n\t\t\tthrow new Error(\n\t\t\t\t`TLSyncRoom: exactly zero or one presence type is expected, but found ${presenceTypes.size}`\n\t\t\t)\n\t\t}\n\n\t\tthis.presenceType = presenceTypes.values().next()?.value ?? null\n\n\t\t// The presence lane never consults authorizers, so a presence key in `authorizeRecord`\n\t\t// would be a silent no-op \u2014 fail loudly at construction instead.\n\t\tif (this.presenceType && this.authorizeRecord) {\n\t\t\tassert(\n\t\t\t\t!getOwnProperty(this.authorizeRecord, this.presenceType.typeName),\n\t\t\t\t`TLSyncRoom: authorizeRecord['${this.presenceType.typeName}'] is a presence type; presence records are not authorized`\n\t\t\t)\n\t\t}\n\n\t\tconst { documentClock } = this.storage.transaction((txn) => {\n\t\t\tthis.schema.migrateStorage(txn)\n\t\t})\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tthis.disposables.push(\n\t\t\tthis.storage.onChange(({ id }) => {\n\t\t\t\tif (id !== this.internalTxnId) {\n\t\t\t\t\tthis.broadcastExternalStorageChanges()\n\t\t\t\t}\n\t\t\t})\n\t\t)\n\n\t\tthis.disposables.push(() => {\n\t\t\tthis.pruneSessions.cancel()\n\t\t\tif (this.pruneTimer) {\n\t\t\t\tclearTimeout(this.pruneTimer)\n\t\t\t\tthis.pruneTimer = null\n\t\t\t}\n\t\t})\n\n\t\t// When clientTimeout is finite, run periodic pruning so idle sessions are\n\t\t// cleaned up even with no traffic. When Infinity or 0 we skip the interval\n\t\t// (e.g. for hibernation); without it, pruning only runs on message or when\n\t\t// socket close/error triggers cancelSession, so pruning idle sessions\n\t\t// reliably depends on the runtime delivering those events.\n\t\tif (Number.isFinite(this.sessionIdleTimeout) && this.sessionIdleTimeout > 0) {\n\t\t\tconst pruneIntervalMs = Math.min(2000, Math.floor(this.sessionIdleTimeout / 4))\n\t\t\tthis.disposables.push(interval(() => this.pruneSessions(), pruneIntervalMs))\n\t\t}\n\t}\n\tprivate broadcastExternalStorageChanges() {\n\t\tthis.storage.transaction((txn) => {\n\t\t\tthis.broadcastChanges(txn)\n\t\t\tthis.lastDocumentClock = txn.getClock()\n\t\t}) // no id needed because this only reads, no writes.\n\t}\n\n\t/**\n\t * Send a message to a particular client. Debounces data events\n\t *\n\t * @param sessionId - The id of the session to send the message to.\n\t * @param message - The message to send. UNSAFE Any diffs must have been downgraded already if necessary\n\t */\n\tprivate _unsafe_sendMessage(\n\t\tsessionId: string,\n\t\tmessage: TLSocketServerSentEvent<R> | TLSocketServerSentDataEvent<R>\n\t) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Tried to send message to unknown session', message.type)\n\t\t\treturn\n\t\t}\n\t\tif (session.state !== RoomSessionState.Connected) {\n\t\t\tthis.log?.warn?.('Tried to send message to disconnected client', message.type)\n\t\t\treturn\n\t\t}\n\t\tif (session.socket.isOpen) {\n\t\t\tif (message.type !== 'patch' && message.type !== 'push_result') {\n\t\t\t\t// this is not a data message\n\t\t\t\tif (message.type !== 'pong') {\n\t\t\t\t\t// non-data messages like \"connect\" might still need to be ordered correctly with\n\t\t\t\t\t// respect to data messages, so it's better to flush just in case\n\t\t\t\t\tthis._flushDataMessages(sessionId)\n\t\t\t\t}\n\t\t\t\tsession.socket.sendMessage(message)\n\t\t\t} else {\n\t\t\t\tif (session.debounceTimer === null) {\n\t\t\t\t\t// this is the first message since the last flush, don't delay it\n\t\t\t\t\tsession.socket.sendMessage({ type: 'data', data: [message] })\n\n\t\t\t\t\tsession.debounceTimer = setTimeout(\n\t\t\t\t\t\t() => this._flushDataMessages(sessionId),\n\t\t\t\t\t\tDATA_MESSAGE_DEBOUNCE_INTERVAL\n\t\t\t\t\t)\n\t\t\t\t} else {\n\t\t\t\t\tsession.outstandingDataMessages.push(message)\n\t\t\t\t}\n\t\t\t}\n\t\t} else {\n\t\t\tthis.cancelSession(session.sessionId)\n\t\t}\n\t}\n\n\t// needs to accept sessionId and not a session because the session might be dead by the time\n\t// the timer fires\n\t_flushDataMessages(sessionId: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\n\t\tif (!session || session.state !== RoomSessionState.Connected) {\n\t\t\treturn\n\t\t}\n\n\t\tsession.debounceTimer = null\n\n\t\tif (session.outstandingDataMessages.length > 0) {\n\t\t\t// hand the buffer over and start a fresh one, rather than truncating in\n\t\t\t// place, so sockets that defer serialization don't see an emptied array\n\t\t\tconst data = session.outstandingDataMessages\n\t\t\tsession.outstandingDataMessages = []\n\t\t\tsession.socket.sendMessage({ type: 'data', data })\n\t\t}\n\t}\n\n\t/** @internal */\n\tprivate removeSession(sessionId: string, fatalReason?: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Tried to remove unknown session')\n\t\t\treturn\n\t\t}\n\n\t\tthis.sessions.delete(sessionId)\n\n\t\ttry {\n\t\t\tif (fatalReason) {\n\t\t\t\tsession.socket.close(TLSyncErrorCloseEventCode, fatalReason)\n\t\t\t} else {\n\t\t\t\tsession.socket.close()\n\t\t\t}\n\t\t} catch {\n\t\t\t// noop, calling .close() multiple times is fine\n\t\t}\n\n\t\tconst presence = this.presenceStore.get(session.presenceId ?? '')\n\t\tif (presence) {\n\t\t\tthis.presenceStore.delete(session.presenceId!)\n\t\t\t// Broadcast presence removal - use RecordsDiff with the removed record\n\t\t\tthis.broadcastPatch({\n\t\t\t\tputs: {},\n\t\t\t\tdeletes: [session.presenceId!],\n\t\t\t})\n\t\t}\n\n\t\tthis.events.emit('session_removed', { sessionId, meta: session.meta })\n\t\tif (this.sessions.size === 0) {\n\t\t\tthis.events.emit('room_became_empty')\n\t\t}\n\t}\n\n\tprivate cancelSession(sessionId: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\treturn\n\t\t}\n\n\t\tif (session.state === RoomSessionState.AwaitingRemoval) {\n\t\t\tthis.log?.warn?.('Tried to cancel session that is already awaiting removal')\n\t\t\treturn\n\t\t}\n\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.AwaitingRemoval,\n\t\t\tsessionId,\n\t\t\tpresenceId: session.presenceId,\n\t\t\tsocket: session.socket,\n\t\t\tcancellationTime: Date.now(),\n\t\t\tmeta: session.meta,\n\t\t\tisReadonly: session.isReadonly,\n\t\t\tobjectAccess: session.objectAccess,\n\t\t\trequiresLegacyRejection: session.requiresLegacyRejection,\n\t\t\tsupportsStringAppend: session.supportsStringAppend,\n\t\t})\n\n\t\ttry {\n\t\t\tsession.socket.close()\n\t\t} catch {\n\t\t\t// noop, calling .close() multiple times is fine\n\t\t}\n\n\t\tthis.scheduleFollowUpPrune()\n\t}\n\n\treadonly internalTxnId = 'TLSyncRoom.txn'\n\n\t/**\n\t * Broadcast a patch to all connected clients except the one with the sessionId provided.\n\t *\n\t * @param diff - The TLSyncForwardDiff with full records (used for migration)\n\t * @param networkDiff - Optional pre-computed NetworkDiff for sessions not needing migration.\n\t *                      If not provided, will be computed from recordsDiff.\n\t * @param sourceSessionId - Optional session ID to exclude from the broadcast\n\t */\n\tprivate broadcastPatch(\n\t\tdiff: TLSyncForwardDiff<R>,\n\t\tnetworkDiff?: NetworkDiff<R> | null,\n\t\tsourceSessionId?: string\n\t) {\n\t\t// Pre-compute network diff if not provided\n\t\tconst unmigrated = networkDiff ?? toNetworkDiff(diff)\n\t\tif (!unmigrated) return this\n\n\t\tthis.sessions.forEach((session) => {\n\t\t\tif (session.state !== RoomSessionState.Connected) return\n\t\t\tif (sourceSessionId === session.sessionId) return\n\t\t\tif (!session.socket.isOpen) {\n\t\t\t\tthis.cancelSession(session.sessionId)\n\t\t\t\treturn\n\t\t\t}\n\n\t\t\tconst diffResult = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsession.serializedSchema,\n\t\t\t\tsession.requiresDownMigrations,\n\t\t\t\tdiff\n\t\t\t)\n\t\t\tif (!diffResult.ok) return\n\n\t\t\tthis._unsafe_sendMessage(session.sessionId, {\n\t\t\t\ttype: 'patch',\n\t\t\t\tdiff: diffResult.value,\n\t\t\t\tserverClock: this.lastDocumentClock,\n\t\t\t})\n\t\t})\n\t\treturn this\n\t}\n\n\t/**\n\t * Send a custom message to a connected client. Useful for application-specific\n\t * communication that doesn't involve document synchronization.\n\t *\n\t * @param sessionId - The ID of the session to send the message to\n\t * @param data - The custom payload to send (will be JSON serialized)\n\t * @example\n\t * ```ts\n\t * // Send a custom notification\n\t * room.sendCustomMessage('user-123', {\n\t *   type: 'notification',\n\t *   message: 'Document saved successfully'\n\t * })\n\t *\n\t * // Send user-specific data\n\t * room.sendCustomMessage('user-456', {\n\t *   type: 'user_permissions',\n\t *   canEdit: true,\n\t *   canDelete: false\n\t * })\n\t * ```\n\t */\n\tsendCustomMessage(sessionId: string, data: any): void {\n\t\tthis._unsafe_sendMessage(sessionId, { type: 'custom', data })\n\t}\n\n\t/**\n\t * Register a new client session with the room. The session will be in an awaiting\n\t * state until it sends a connect message with protocol handshake.\n\t *\n\t * @param opts - Session configuration\n\t *   - sessionId - Unique identifier for this session\n\t *   - socket - WebSocket adapter for communication\n\t *   - meta - Application-specific metadata for this session\n\t *   - isReadonly - Whether this session can modify documents\n\t * @returns This room instance for method chaining\n\t * @example\n\t * ```ts\n\t * room.handleNewSession({\n\t *   sessionId: crypto.randomUUID(),\n\t *   socket: new WebSocketAdapter(ws),\n\t *   meta: { userId: '123', name: 'Alice', avatar: 'url' },\n\t *   isReadonly: !hasEditPermission\n\t * })\n\t * ```\n\t *\n\t * @internal\n\t */\n\thandleNewSession(opts: {\n\t\tsessionId: string\n\t\tsocket: TLRoomSocket<R>\n\t\tmeta: SessionMeta\n\t\tisReadonly: boolean\n\t\tobjectAccess?: TLObjectStoreAccess\n\t}) {\n\t\tconst { sessionId, socket, meta, isReadonly, objectAccess } = opts\n\t\tconst existing = this.sessions.get(sessionId)\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.AwaitingConnectMessage,\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tpresenceId: existing?.presenceId ?? this.presenceType?.createId() ?? null,\n\t\t\tsessionStartTime: Date.now(),\n\t\t\tmeta,\n\t\t\tisReadonly: isReadonly ?? false,\n\t\t\tobjectAccess: objectAccess ?? 'write',\n\t\t\t// this gets set later during handleConnectMessage\n\t\t\trequiresLegacyRejection: false,\n\t\t\tsupportsStringAppend: true,\n\t\t})\n\t\treturn this\n\t}\n\n\t/**\n\t * Resume a previously-connected session directly into `Connected` state, bypassing the\n\t * connect handshake. Used after server hibernation when the WebSocket is still alive but\n\t * all in-memory state has been lost.\n\t *\n\t * @internal\n\t */\n\thandleResumedSession(opts: {\n\t\tsessionId: string\n\t\tsocket: TLRoomSocket<R>\n\t\tmeta: SessionMeta\n\t\tisReadonly: boolean\n\t\tobjectAccess?: TLObjectStoreAccess\n\t\tserializedSchema: SerializedSchema\n\t\tpresenceId: string | null\n\t\tpresenceRecord: UnknownRecord | null\n\t\trequiresLegacyRejection: boolean\n\t\tsupportsStringAppend: boolean\n\t}) {\n\t\tconst {\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tmeta,\n\t\t\tisReadonly,\n\t\t\tobjectAccess,\n\t\t\tserializedSchema,\n\t\t\tpresenceId,\n\t\t\tpresenceRecord,\n\t\t\trequiresLegacyRejection,\n\t\t\tsupportsStringAppend,\n\t\t} = opts\n\n\t\tconst migrations = this.schema.getMigrationsSince(serializedSchema)\n\t\tconst requiresDownMigrations = migrations.ok ? migrations.value.length > 0 : false\n\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.Connected,\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tpresenceId: presenceId ?? this.presenceType?.createId() ?? null,\n\t\t\tserializedSchema,\n\t\t\trequiresDownMigrations,\n\t\t\tlastInteractionTime: Date.now(),\n\t\t\tdebounceTimer: null,\n\t\t\toutstandingDataMessages: [],\n\t\t\tmeta,\n\t\t\tisReadonly,\n\t\t\tobjectAccess: objectAccess ?? 'write',\n\t\t\trequiresLegacyRejection,\n\t\t\tsupportsStringAppend,\n\t\t})\n\n\t\tif (presenceRecord && presenceId) {\n\t\t\tthis.presenceStore.set(presenceId, presenceRecord as R)\n\t\t}\n\t}\n\n\t/**\n\t * Checks if all connected sessions support string append operations (protocol version 8+).\n\t * If any client is on an older version, returns false to enable legacy append mode.\n\t *\n\t * @returns True if all connected sessions are on protocol version 8 or higher\n\t */\n\tgetCanEmitStringAppend(): boolean {\n\t\tfor (const session of this.sessions.values()) {\n\t\t\tif (session.state === RoomSessionState.Connected) {\n\t\t\t\tif (!session.supportsStringAppend) {\n\t\t\t\t\treturn false\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn true\n\t}\n\n\t/**\n\t * When we send a diff to a client, if that client is on a lower version than us, we need to make\n\t * the diff compatible with their version. This method takes a TLSyncForwardDiff (which has full\n\t * records) and migrates all records down to the client's schema version, returning a NetworkDiff.\n\t *\n\t * For updates (entries with [before, after] tuples), both records are migrated and a patch is\n\t * computed from the migrated versions, preserving efficient patch semantics even across versions.\n\t *\n\t * If a migration fails, the session will be rejected.\n\t *\n\t * @param sessionId - The session ID (for rejection on migration failure)\n\t * @param serializedSchema - The client's schema to migrate to\n\t * @param requiresDownMigrations - Whether the client needs down migrations\n\t * @param diff - The TLSyncForwardDiff containing full records to migrate\n\t * @param unmigrated - Optional pre-computed NetworkDiff for when no migration is needed\n\t * @returns A NetworkDiff with migrated records, or a migration failure\n\t */\n\tprivate migrateDiffOrRejectSession(\n\t\tsessionId: string,\n\t\tserializedSchema: SerializedSchema,\n\t\trequiresDownMigrations: boolean,\n\t\tdiff: TLSyncForwardDiff<R>,\n\t\tunmigrated?: NetworkDiff<R>\n\t): Result<NetworkDiff<R>, MigrationFailureReason> {\n\t\tif (!requiresDownMigrations) {\n\t\t\treturn Result.ok(unmigrated ?? toNetworkDiff(diff) ?? {})\n\t\t}\n\n\t\tconst result: NetworkDiff<R> = {}\n\n\t\t// Migrate puts (either adds or updates)\n\t\tfor (const [id, put] of objectMapEntriesIterable(diff.puts)) {\n\t\t\tif (Array.isArray(put)) {\n\t\t\t\t// Update: [before, after] tuple - migrate both and compute patch\n\t\t\t\tconst [from, to] = put\n\t\t\t\tconst fromResult = this.schema.migratePersistedRecord(from, serializedSchema, 'down')\n\t\t\t\tif (fromResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(fromResult.reason)\n\t\t\t\t}\n\t\t\t\tconst toResult = this.schema.migratePersistedRecord(to, serializedSchema, 'down')\n\t\t\t\tif (toResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(toResult.reason)\n\t\t\t\t}\n\t\t\t\tconst patch = diffRecord(fromResult.value, toResult.value)\n\t\t\t\tif (patch) {\n\t\t\t\t\tresult[id] = [RecordOpType.Patch, patch]\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Add: single record - migrate and put\n\t\t\t\tconst migrationResult = this.schema.migratePersistedRecord(put, serializedSchema, 'down')\n\t\t\t\tif (migrationResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(migrationResult.reason)\n\t\t\t\t}\n\t\t\t\tresult[id] = [RecordOpType.Put, migrationResult.value]\n\t\t\t}\n\t\t}\n\n\t\t// Deletes don't need migration\n\t\tfor (const id of diff.deletes) {\n\t\t\tresult[id] = [RecordOpType.Remove]\n\t\t}\n\n\t\treturn Result.ok(result)\n\t}\n\n\t/**\n\t * Process an incoming message from a client session. Handles connection requests,\n\t * data synchronization pushes, and ping/pong for connection health.\n\t *\n\t * @param sessionId - The ID of the session that sent the message\n\t * @param message - The client message to process\n\t * @example\n\t * ```ts\n\t * // Typically called by WebSocket message handlers\n\t * websocket.onMessage((data) => {\n\t *   const message = JSON.parse(data)\n\t *   room.handleMessage(sessionId, message)\n\t * })\n\t * ```\n\t */\n\tasync handleMessage(sessionId: string, message: TLSocketClientSentEvent<R>) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Received message from unknown session')\n\t\t\treturn\n\t\t}\n\t\ttry {\n\t\t\tswitch (message.type) {\n\t\t\t\tcase 'connect': {\n\t\t\t\t\treturn this.handleConnectRequest(session, message)\n\t\t\t\t}\n\t\t\t\tcase 'push': {\n\t\t\t\t\treturn this.handlePushRequest(session, message)\n\t\t\t\t}\n\t\t\t\tcase 'ping': {\n\t\t\t\t\tif (session.state === RoomSessionState.Connected) {\n\t\t\t\t\t\tsession.lastInteractionTime = Date.now()\n\t\t\t\t\t}\n\t\t\t\t\treturn this._unsafe_sendMessage(session.sessionId, { type: 'pong' })\n\t\t\t\t}\n\t\t\t\tdefault: {\n\t\t\t\t\texhaustiveSwitchError(message)\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (e) {\n\t\t\tif (e instanceof TLSyncError) {\n\t\t\t\tthis.rejectSession(session.sessionId, e.reason)\n\t\t\t} else {\n\t\t\t\t// log error and reboot the room?\n\t\t\t\tthrow e\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Reject and disconnect a session due to incompatibility or other fatal errors.\n\t * Sends appropriate error messages before closing the connection.\n\t *\n\t * @param sessionId - The session to reject\n\t * @param fatalReason - The reason for rejection (optional)\n\t * @example\n\t * ```ts\n\t * // Reject due to version mismatch\n\t * room.rejectSession('user-123', TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t *\n\t * // Reject due to permission issue\n\t * room.rejectSession('user-456', 'Insufficient permissions')\n\t * ```\n\t */\n\trejectSession(sessionId: string, fatalReason?: TLSyncErrorCloseEventReason | string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) return\n\t\tif (!fatalReason) {\n\t\t\tthis.removeSession(sessionId)\n\t\t\treturn\n\t\t}\n\t\tif (session.requiresLegacyRejection) {\n\t\t\ttry {\n\t\t\t\tif (session.socket.isOpen) {\n\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\tlet legacyReason: TLIncompatibilityReason\n\t\t\t\t\tswitch (fatalReason) {\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.CLIENT_TOO_OLD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.ClientTooOld\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.SERVER_TOO_OLD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.ServerTooOld\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.INVALID_RECORD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.InvalidRecord\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tdefault:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.InvalidOperation\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t}\n\t\t\t\t\tsession.socket.sendMessage({\n\t\t\t\t\t\ttype: 'incompatibility_error',\n\t\t\t\t\t\treason: legacyReason,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t} catch {\n\t\t\t\t// noop\n\t\t\t} finally {\n\t\t\t\tthis.removeSession(sessionId)\n\t\t\t}\n\t\t} else {\n\t\t\tthis.removeSession(sessionId, fatalReason)\n\t\t}\n\t}\n\n\tprivate forceAllReconnect() {\n\t\tfor (const session of this.sessions.values()) {\n\t\t\tthis.removeSession(session.sessionId)\n\t\t}\n\t}\n\n\tprivate broadcastChanges(txn: TLSyncStorageTransaction<R>) {\n\t\tconst changes = txn.getChangesSince(this.lastDocumentClock)\n\t\tif (!changes) return\n\t\tconst { wipeAll, diff } = changes\n\t\tthis.lastDocumentClock = txn.getClock()\n\t\tif (wipeAll) {\n\t\t\t// If this happens it means we'd need to broadcast a wipe_all message to all clients,\n\t\t\t// which is not part of the protocol yet, so we need to force all clients to reconnect instead.\n\t\t\tthis.forceAllReconnect()\n\t\t\treturn\n\t\t}\n\t\tthis.broadcastPatch(diff)\n\t}\n\n\t/**\n\t * Work out whether a client we can't reconcile schemas with is running a newer or older SDK\n\t * than us.\n\t */\n\tprivate getVersionMismatchReason(theirSchema: SerializedSchema) {\n\t\tconst ourSchema = this.serializedSchema\n\n\t\tif (theirSchema.schemaVersion > ourSchema.schemaVersion) {\n\t\t\treturn TLSyncErrorCloseEventReason.SERVER_TOO_OLD\n\t\t}\n\n\t\tif (theirSchema.schemaVersion === 2 && ourSchema.schemaVersion === 2) {\n\t\t\tfor (const [sequenceId, theirVersion] of Object.entries(theirSchema.sequences)) {\n\t\t\t\tconst ourVersion = ourSchema.sequences[sequenceId]\n\t\t\t\tif (ourVersion === undefined || theirVersion > ourVersion) {\n\t\t\t\t\treturn TLSyncErrorCloseEventReason.SERVER_TOO_OLD\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn TLSyncErrorCloseEventReason.CLIENT_TOO_OLD\n\t}\n\n\tprivate handleConnectRequest(\n\t\tsession: RoomSession<R, SessionMeta>,\n\t\tmessage: Extract<TLSocketClientSentEvent<R>, { type: 'connect' }>\n\t) {\n\t\t// if the protocol versions don't match, disconnect the client\n\t\t// we will eventually want to try to make our protocol backwards compatible to some degree\n\t\t// and have a MIN_PROTOCOL_VERSION constant that the TLSyncRoom implements support for\n\t\tlet theirProtocolVersion = message.protocolVersion\n\t\t// 5 is the same as 6\n\t\tif (theirProtocolVersion === 5) {\n\t\t\ttheirProtocolVersion = 6\n\t\t}\n\t\t// 6 is almost the same as 7\n\t\tsession.requiresLegacyRejection = theirProtocolVersion === 6\n\t\tif (theirProtocolVersion === 6) {\n\t\t\ttheirProtocolVersion++\n\t\t}\n\t\tif (theirProtocolVersion === 7) {\n\t\t\ttheirProtocolVersion++\n\t\t\tsession.supportsStringAppend = false\n\t\t}\n\n\t\tif (theirProtocolVersion == null || theirProtocolVersion < getTlsyncProtocolVersion()) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t} else if (theirProtocolVersion > getTlsyncProtocolVersion()) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.SERVER_TOO_OLD)\n\t\t\treturn\n\t\t}\n\t\t// If the client's store is at a different version to ours, it could cause corruption.\n\t\t// We should disconnect the client and ask them to refresh.\n\t\tif (message.schema == null) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t}\n\t\tconst migrations = this.schema.getMigrationsSince(message.schema)\n\t\tif (!migrations.ok) {\n\t\t\tthis.rejectSession(session.sessionId, this.getVersionMismatchReason(message.schema))\n\t\t\treturn\n\t\t}\n\t\t// The client's schema is older than ours, but we can't migrate our data down to their\n\t\t// version (a migration isn't record-scoped or has no down migration), so they're too old.\n\t\tif (migrations.value.some((m) => m.scope !== 'record' || !m.down)) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t}\n\n\t\tconst sessionSchema = isEqual(message.schema, this.serializedSchema)\n\t\t\t? this.serializedSchema\n\t\t\t: message.schema\n\n\t\tconst requiresDownMigrations = migrations.value.length > 0\n\n\t\tconst connect = async (msg: Extract<TLSocketServerSentEvent<R>, { type: 'connect' }>) => {\n\t\t\tthis.sessions.set(session.sessionId, {\n\t\t\t\tstate: RoomSessionState.Connected,\n\t\t\t\tsessionId: session.sessionId,\n\t\t\t\tpresenceId: session.presenceId,\n\t\t\t\tsocket: session.socket,\n\t\t\t\tserializedSchema: sessionSchema,\n\t\t\t\trequiresDownMigrations,\n\t\t\t\tlastInteractionTime: Date.now(),\n\t\t\t\tdebounceTimer: null,\n\t\t\t\toutstandingDataMessages: [],\n\t\t\t\tsupportsStringAppend: session.supportsStringAppend,\n\t\t\t\tmeta: session.meta,\n\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\tobjectAccess: session.objectAccess,\n\t\t\t\trequiresLegacyRejection: session.requiresLegacyRejection,\n\t\t\t})\n\t\t\tthis._unsafe_sendMessage(session.sessionId, msg)\n\t\t}\n\n\t\tconst { documentClock, result } = this.storage.transaction((txn) => {\n\t\t\tthis.broadcastChanges(txn)\n\t\t\tconst docChanges = txn.getChangesSince(message.lastServerClock)\n\t\t\tconst presenceDiff = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsessionSchema,\n\t\t\t\trequiresDownMigrations,\n\t\t\t\t{\n\t\t\t\t\t// Exclude the connecting session's own presence \u2014 it will push fresh\n\t\t\t\t\t// data immediately after connecting. Sending the stale record back\n\t\t\t\t\t// would leave an orphaned presence in the client's local store (the\n\t\t\t\t\t// server never echoes a session's own updates back to it).\n\t\t\t\t\tputs: Object.fromEntries(\n\t\t\t\t\t\t[...this.presenceStore.values()]\n\t\t\t\t\t\t\t.filter((p) => p.id !== session.presenceId)\n\t\t\t\t\t\t\t.map((p) => [p.id, p])\n\t\t\t\t\t),\n\t\t\t\t\tdeletes: [],\n\t\t\t\t}\n\t\t\t)\n\t\t\tif (!presenceDiff.ok) return null\n\n\t\t\t// Migrate the diff if needed, or use the pre-computed network diff\n\t\t\tlet docDiff: NetworkDiff<R> | null = null\n\t\t\tif (docChanges && sessionSchema !== this.serializedSchema) {\n\t\t\t\tconst migrated = this.migrateDiffOrRejectSession(\n\t\t\t\t\tsession.sessionId,\n\t\t\t\t\tsessionSchema,\n\t\t\t\t\trequiresDownMigrations,\n\t\t\t\t\tdocChanges.diff\n\t\t\t\t)\n\t\t\t\tif (!migrated.ok) return null\n\t\t\t\tdocDiff = migrated.value\n\t\t\t} else if (docChanges) {\n\t\t\t\tdocDiff = toNetworkDiff(docChanges.diff)\n\t\t\t}\n\t\t\treturn {\n\t\t\t\ttype: 'connect',\n\t\t\t\tconnectRequestId: message.connectRequestId,\n\t\t\t\thydrationType: docChanges?.wipeAll ? 'wipe_all' : 'wipe_presence',\n\t\t\t\tprotocolVersion: getTlsyncProtocolVersion(),\n\t\t\t\tschema: this.schema.serialize(),\n\t\t\t\tserverClock: txn.getClock(),\n\t\t\t\tdiff: { ...presenceDiff.value, ...docDiff },\n\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\tobjectAccess: session.objectAccess,\n\t\t\t} satisfies Extract<TLSocketServerSentEvent<R>, { type: 'connect' }>\n\t\t}) // no id needed because this only reads, no writes.\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tif (result) {\n\t\t\tconnect(result)\n\t\t}\n\t}\n\n\tprivate handlePushRequest(\n\t\tsession: RoomSession<R, SessionMeta> | null,\n\t\tmessage: Extract<TLSocketClientSentEvent<R>, { type: 'push' }>\n\t) {\n\t\t// We must be connected to handle push requests\n\t\tif (session && session.state !== RoomSessionState.Connected) {\n\t\t\treturn\n\t\t}\n\t\t// update the last interaction time\n\t\tif (session) {\n\t\t\tsession.lastInteractionTime = Date.now()\n\t\t}\n\n\t\tconst legacyAppendMode = !this.getCanEmitStringAppend()\n\n\t\tinterface ActualChanges {\n\t\t\tdiffs: {\n\t\t\t\tnetworkDiff: NetworkDiff<R>\n\t\t\t\tdiff: TLSyncForwardDiff<R>\n\t\t\t} | null\n\t\t}\n\n\t\tconst propagateOp = (\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\top: RecordOp<R>,\n\t\t\tbefore: R | undefined,\n\t\t\tafter: R | undefined\n\t\t) => {\n\t\t\tif (!changes.diffs) changes.diffs = { networkDiff: {}, diff: { puts: {}, deletes: [] } }\n\t\t\tchanges.diffs.networkDiff[id] = op\n\t\t\tswitch (op[0]) {\n\t\t\t\tcase RecordOpType.Put:\n\t\t\t\t\tchanges.diffs.diff.puts[id] = op[1]\n\t\t\t\t\tbreak\n\t\t\t\tcase RecordOpType.Patch:\n\t\t\t\t\tassert(before && after, 'before and after are required for patches')\n\t\t\t\t\tchanges.diffs.diff.puts[id] = [before, after]\n\t\t\t\t\tbreak\n\t\t\t\tcase RecordOpType.Remove:\n\t\t\t\t\tchanges.diffs.diff.deletes.push(id)\n\t\t\t\t\tbreak\n\t\t\t\tdefault:\n\t\t\t\t\texhaustiveSwitchError(op[0])\n\t\t\t}\n\t\t}\n\n\t\tconst addDocument = (\n\t\t\tstorage: MinimalDocStore<R>,\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\t_state: R,\n\t\t\tauthorize?: (prev: R | null, next: R) => R | null\n\t\t): Result<void, void> => {\n\t\t\tconst res = session\n\t\t\t\t? this.schema.migratePersistedRecord(_state, session.serializedSchema, 'up')\n\t\t\t\t: { type: 'success' as const, value: _state }\n\t\t\tif (res.type === 'error') {\n\t\t\t\tthrow new TLSyncError(res.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t}\n\t\t\tlet { value: state } = res\n\n\t\t\t// Get the existing document, if any\n\t\t\tconst doc = storage.get(id) as R | undefined\n\n\t\t\t// Authorize on the up-migrated record; on create the authorizer's return is stored as-is,\n\t\t\t// so no later migration can clobber stamped fields.\n\t\t\tif (authorize) {\n\t\t\t\tconst result = authorize(doc ?? null, state)\n\t\t\t\tif (!result) return Result.ok(undefined) // vetoed: skip the op, the client self-corrects\n\t\t\t\tif (!doc) state = result // create: store the authorizer's (stamped) record\n\t\t\t}\n\n\t\t\tif (doc) {\n\t\t\t\t// If there's an existing document, replace it with the new state\n\t\t\t\t// but propagate a diff rather than the entire value\n\t\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, doc.typeName))\n\t\t\t\tconst diff = diffAndValidateRecord(doc, state, recordType)\n\t\t\t\tif (diff) {\n\t\t\t\t\tstorage.set(id, state)\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff], doc, state)\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Otherwise, if we don't already have a document with this id\n\t\t\t\t// create the document and propagate the put op\n\t\t\t\t// set automatically clears tombstones if they exist\n\t\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, state.typeName))\n\t\t\t\tvalidateRecord(state, recordType)\n\t\t\t\tstorage.set(id, state)\n\t\t\t\tpropagateOp(changes, id, [RecordOpType.Put, state], undefined, undefined)\n\t\t\t}\n\n\t\t\treturn Result.ok(undefined)\n\t\t}\n\n\t\tconst patchDocument = (\n\t\t\tstorage: MinimalDocStore<R>,\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\tpatch: ObjectDiff,\n\t\t\tauthorize?: (prev: R, next: R) => R | null\n\t\t) => {\n\t\t\t// if it was already deleted, there's no need to apply the patch\n\t\t\tconst doc = storage.get(id) as R | undefined\n\t\t\tif (!doc) return\n\n\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, doc.typeName))\n\t\t\t// If the client's version of the record is older than ours,\n\t\t\t// we apply the patch to the downgraded version of the record\n\t\t\tconst downgraded = session\n\t\t\t\t? this.schema.migratePersistedRecord(doc, session.serializedSchema, 'down')\n\t\t\t\t: { type: 'success' as const, value: doc }\n\t\t\tif (downgraded.type === 'error') {\n\t\t\t\tthrow new TLSyncError(downgraded.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t}\n\n\t\t\tif (downgraded.value === doc) {\n\t\t\t\t// If the versions are compatible, apply the patch and propagate the patch op\n\t\t\t\tconst diff = applyAndDiffRecord(doc, patch, recordType, legacyAppendMode)\n\t\t\t\tif (diff) {\n\t\t\t\t\t// Authorize on the committed candidate \u2014 the record that will actually be stored.\n\t\t\t\t\tif (authorize && !authorize(doc, diff[1])) return\n\t\t\t\t\tstorage.set(id, diff[1])\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff[0]], doc, diff[1])\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// need to apply the patch to the downgraded version and then upgrade it\n\n\t\t\t\t// apply the patch to the downgraded version\n\t\t\t\tconst patched = applyObjectDiff(downgraded.value, patch)\n\t\t\t\t// then upgrade the patched version and use that as the new state\n\t\t\t\tconst upgraded = session\n\t\t\t\t\t? this.schema.migratePersistedRecord(patched, session.serializedSchema, 'up')\n\t\t\t\t\t: { type: 'success' as const, value: patched }\n\t\t\t\t// If the client's version is too old, we'll hit an error\n\t\t\t\tif (upgraded.type === 'error') {\n\t\t\t\t\tthrow new TLSyncError(upgraded.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t}\n\t\t\t\t// replace the state with the upgraded version and propagate the patch op\n\t\t\t\tconst diff = diffAndValidateRecord(doc, upgraded.value, recordType, legacyAppendMode)\n\t\t\t\tif (diff) {\n\t\t\t\t\t// Authorize on the committed candidate \u2014 the upgraded record, not a raw preview.\n\t\t\t\t\tif (authorize && !authorize(doc, upgraded.value)) return\n\t\t\t\t\tstorage.set(id, upgraded.value)\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff], doc, upgraded.value)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst { result, documentClock, changes } = this.storage.transaction(\n\t\t\t(txn) => {\n\t\t\t\tthis.broadcastChanges(txn)\n\t\t\t\t// collect actual ops that resulted from the push\n\t\t\t\t// these will be broadcast to other users\n\n\t\t\t\tconst docChanges: ActualChanges = { diffs: null }\n\t\t\t\tconst presenceChanges: ActualChanges = { diffs: null }\n\n\t\t\t\tif (this.presenceType && session?.presenceId && 'presence' in message && message.presence) {\n\t\t\t\t\tif (!session) throw new Error('session is required for presence pushes')\n\t\t\t\t\t// The push request was for the presence scope.\n\t\t\t\t\tconst id = session.presenceId\n\t\t\t\t\tconst [type, val] = message.presence\n\t\t\t\t\tconst { typeName } = this.presenceType\n\t\t\t\t\tswitch (type) {\n\t\t\t\t\t\tcase RecordOpType.Put: {\n\t\t\t\t\t\t\t// Try to put the document. If it fails, stop here.\n\t\t\t\t\t\t\taddDocument(this.presenceStore, presenceChanges, id, {\n\t\t\t\t\t\t\t\t...val,\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\ttypeName,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t}\n\t\t\t\t\t\tcase RecordOpType.Patch: {\n\t\t\t\t\t\t\t// Try to patch the document. If it fails, stop here.\n\t\t\t\t\t\t\tpatchDocument(this.presenceStore, presenceChanges, id, {\n\t\t\t\t\t\t\t\t...val,\n\t\t\t\t\t\t\t\tid: [ValueOpType.Put, id],\n\t\t\t\t\t\t\t\ttypeName: [ValueOpType.Put, typeName],\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\t// Per-op write gate: document-lane records are gated by `isReadonly`, object-lane\n\t\t\t\t// records by `objectAccess`. Denied ops are skipped (the client is corrected by the\n\t\t\t\t// resulting discard/rebase push_result, exactly as whole-diff readonly skips were).\n\t\t\t\t// Server-initiated pushes (no session) are always allowed.\n\t\t\t\tconst canWrite = (typeName: string) =>\n\t\t\t\t\t!session ||\n\t\t\t\t\t(this.objectTypes.has(typeName) ? session.objectAccess !== 'read' : !session.isReadonly)\n\n\t\t\t\tif (message.diff) {\n\t\t\t\t\t// The push request was for the document scope.\n\t\t\t\t\tfor (const [id, op] of objectMapEntriesIterable(message.diff!)) {\n\t\t\t\t\t\tswitch (op[0]) {\n\t\t\t\t\t\t\tcase RecordOpType.Put: {\n\t\t\t\t\t\t\t\t// The write gate is checked before type validation so that a denied\n\t\t\t\t\t\t\t\t// session's ops are skipped without rejection, matching the previous\n\t\t\t\t\t\t\t\t// whole-diff readonly behavior.\n\t\t\t\t\t\t\t\tif (!canWrite(op[1].typeName)) continue\n\t\t\t\t\t\t\t\t// Try to add the document.\n\t\t\t\t\t\t\t\t// If we're putting a record with a type that we don't recognize, fail\n\t\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\t\t!this.documentTypes.has(op[1].typeName) &&\n\t\t\t\t\t\t\t\t\t!this.objectTypes.has(op[1].typeName)\n\t\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\t\tthrow new TLSyncError(\n\t\t\t\t\t\t\t\t\t\t'invalid record',\n\t\t\t\t\t\t\t\t\t\tTLSyncErrorCloseEventReason.INVALID_RECORD\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tconst record = op[1]\n\t\t\t\t\t\t\t\t// Per-type authorizer: stamp/veto the write from the session's identity.\n\t\t\t\t\t\t\t\t// Client pushes only; runs inside `addDocument`, on the up-migrated record.\n\t\t\t\t\t\t\t\tlet authorize: ((prev: R | null, next: R) => R | null) | undefined\n\t\t\t\t\t\t\t\tif (session && this.authorizeRecord) {\n\t\t\t\t\t\t\t\t\tconst prev = (txn.get(id) as R | undefined) ?? null\n\t\t\t\t\t\t\t\t\t// A put must not change the record's typeName: the authorizer lookup keys\n\t\t\t\t\t\t\t\t\t// off the incoming typeName while the replace path validates against the\n\t\t\t\t\t\t\t\t\t// stored one, so a swap would consult the wrong authorizer (or none).\n\t\t\t\t\t\t\t\t\t// Skip it like a veto; the client self-corrects.\n\t\t\t\t\t\t\t\t\tif (prev && prev.typeName !== record.typeName) {\n\t\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t\t'skipping put that changes typeName',\n\t\t\t\t\t\t\t\t\t\t\t`${prev.typeName} -> ${record.typeName}`,\n\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\tconst authorizePut = this.authorizerFor(record.typeName)\n\t\t\t\t\t\t\t\t\tif (authorizePut) {\n\t\t\t\t\t\t\t\t\t\tauthorize = (prevRec, next) => {\n\t\t\t\t\t\t\t\t\t\t\tconst result = authorizePut(\n\t\t\t\t\t\t\t\t\t\t\t\tprevRec\n\t\t\t\t\t\t\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsession: { sessionId: session.sessionId, meta: session.meta },\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: 'update',\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tprev: prevRec,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsession: { sessionId: session.sessionId, meta: session.meta },\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: 'create',\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tprev: null,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\tif (!result) {\n\t\t\t\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t\t\t\t'authorizer vetoed put',\n\t\t\t\t\t\t\t\t\t\t\t\t\trecord.typeName,\n\t\t\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\t\treturn null\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t// create: store the stamped record; update: allow/veto only\n\t\t\t\t\t\t\t\t\t\t\treturn prevRec ? next : result\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\taddDocument(txn, docChanges, id, record, authorize)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcase RecordOpType.Patch: {\n\t\t\t\t\t\t\t\tconst doc = txn.get(id) as R | undefined\n\t\t\t\t\t\t\t\t// if it was already deleted, there's no need to apply the patch\n\t\t\t\t\t\t\t\tif (!doc) continue\n\t\t\t\t\t\t\t\tif (!canWrite(doc.typeName)) continue\n\t\t\t\t\t\t\t\t// Per-type authorizer (update, allow/veto only): runs inside `patchDocument`\n\t\t\t\t\t\t\t\t// on the committed candidate, never on a raw client-version preview.\n\t\t\t\t\t\t\t\tconst authorizePatch = session && this.authorizerFor(doc.typeName)\n\t\t\t\t\t\t\t\tconst authorize = authorizePatch\n\t\t\t\t\t\t\t\t\t? (prev: R, next: R) => {\n\t\t\t\t\t\t\t\t\t\t\tconst result = authorizePatch({\n\t\t\t\t\t\t\t\t\t\t\t\tsession: { sessionId: session.sessionId, meta: session.meta },\n\t\t\t\t\t\t\t\t\t\t\t\ttype: 'update',\n\t\t\t\t\t\t\t\t\t\t\t\tprev,\n\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t\t\t\tif (!result) {\n\t\t\t\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t\t\t\t'authorizer vetoed patch',\n\t\t\t\t\t\t\t\t\t\t\t\t\tdoc.typeName,\n\t\t\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\treturn result\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t: undefined\n\t\t\t\t\t\t\t\t// Try to patch the document. If it fails, stop here.\n\t\t\t\t\t\t\t\tpatchDocument(txn, docChanges, id, op[1], authorize)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcase RecordOpType.Remove: {\n\t\t\t\t\t\t\t\tconst doc = txn.get(id) as R | undefined\n\t\t\t\t\t\t\t\tif (!doc) {\n\t\t\t\t\t\t\t\t\t// If the doc was already deleted, don't do anything, no need to propagate a delete op\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tif (!canWrite(doc.typeName)) continue\n\t\t\t\t\t\t\t\t// Per-type authorizer (delete): veto deletes the session isn't allowed to make,\n\t\t\t\t\t\t\t\t// e.g. deleting someone else's comment. Allow/veto only.\n\t\t\t\t\t\t\t\tconst authorizeRemove = session && this.authorizerFor(doc.typeName)\n\t\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\t\tauthorizeRemove &&\n\t\t\t\t\t\t\t\t\t!authorizeRemove({\n\t\t\t\t\t\t\t\t\t\tsession: { sessionId: session.sessionId, meta: session.meta },\n\t\t\t\t\t\t\t\t\t\ttype: 'delete',\n\t\t\t\t\t\t\t\t\t\tprev: doc,\n\t\t\t\t\t\t\t\t\t\tnext: null,\n\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t'authorizer vetoed delete',\n\t\t\t\t\t\t\t\t\t\tdoc.typeName,\n\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t\t// Delete the document and propagate the delete op\n\t\t\t\t\t\t\t\t// delete automatically creates tombstones\n\t\t\t\t\t\t\t\ttxn.delete(id)\n\t\t\t\t\t\t\t\tpropagateOp(docChanges, id, op, doc, undefined)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\treturn { docChanges, presenceChanges }\n\t\t\t},\n\t\t\t{ id: this.internalTxnId, emitChanges: 'when-different' }\n\t\t)\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tlet pushResult: TLSocketServerSentEvent<R> | undefined\n\t\tif (changes && session) {\n\t\t\t// txn did not apply verbatim so we should broadcast the actual changes\n\t\t\tresult.docChanges.diffs = { networkDiff: toNetworkDiff(changes) ?? {}, diff: changes }\n\t\t}\n\n\t\tif (isEqual(result.docChanges.diffs?.networkDiff, message.diff)) {\n\t\t\tpushResult = {\n\t\t\t\ttype: 'push_result',\n\t\t\t\tclientClock: message.clientClock,\n\t\t\t\tserverClock: documentClock,\n\t\t\t\taction: 'commit',\n\t\t\t}\n\t\t} else if (!result.docChanges.diffs?.networkDiff) {\n\t\t\tpushResult = {\n\t\t\t\ttype: 'push_result',\n\t\t\t\tclientClock: message.clientClock,\n\t\t\t\tserverClock: documentClock,\n\t\t\t\taction: 'discard',\n\t\t\t}\n\t\t} else if (session) {\n\t\t\t// if recordsDiff is null but diff is not, then there are no clients that need down migrations\n\t\t\t// so we can just use the diff directly\n\t\t\tconst diff = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsession.serializedSchema,\n\t\t\t\tsession.requiresDownMigrations,\n\t\t\t\tresult.docChanges.diffs.diff,\n\t\t\t\tresult.docChanges.diffs.networkDiff\n\t\t\t)\n\t\t\tif (diff.ok) {\n\t\t\t\tpushResult = {\n\t\t\t\t\ttype: 'push_result',\n\t\t\t\t\tclientClock: message.clientClock,\n\t\t\t\t\tserverClock: documentClock,\n\t\t\t\t\taction: { rebaseWithDiff: diff.value },\n\t\t\t\t}\n\t\t\t}\n\t\t\t// if the difff was not ok then the session was rejected and it's ok to continue without a push result\n\t\t}\n\n\t\tif (session && pushResult) {\n\t\t\tthis._unsafe_sendMessage(session.sessionId, pushResult)\n\t\t}\n\t\tif (result.docChanges.diffs || result.presenceChanges.diffs) {\n\t\t\tthis.broadcastPatch(\n\t\t\t\t{\n\t\t\t\t\tputs: {\n\t\t\t\t\t\t...result.docChanges.diffs?.diff.puts,\n\t\t\t\t\t\t...result.presenceChanges.diffs?.diff.puts,\n\t\t\t\t\t},\n\t\t\t\t\tdeletes: [\n\t\t\t\t\t\t...(result.docChanges.diffs?.diff.deletes ?? []),\n\t\t\t\t\t\t...(result.presenceChanges.diffs?.diff.deletes ?? []),\n\t\t\t\t\t],\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\t...result.docChanges.diffs?.networkDiff,\n\t\t\t\t\t...result.presenceChanges.diffs?.networkDiff,\n\t\t\t\t},\n\t\t\t\tsession?.sessionId\n\t\t\t)\n\t\t}\n\n\t\tif (result.presenceChanges.diffs) {\n\t\t\tqueueMicrotask(() => {\n\t\t\t\tthis.onPresenceChange?.()\n\t\t\t})\n\t\t}\n\n\t\tif (result.docChanges.diffs && this.onCommittedChanges) {\n\t\t\tconst diff = result.docChanges.diffs.diff\n\t\t\tqueueMicrotask(() => {\n\t\t\t\ttry {\n\t\t\t\t\tthis.onCommittedChanges?.({ diff, documentClock })\n\t\t\t\t} catch (e) {\n\t\t\t\t\tthis.log?.error?.('onCommittedChanges threw', e)\n\t\t\t\t}\n\t\t\t})\n\t\t}\n\t}\n\n\t/**\n\t * Handle the event when a client disconnects. Cleans up the session and\n\t * removes any presence information.\n\t *\n\t * @param sessionId - The session that disconnected\n\t * @example\n\t * ```ts\n\t * websocket.onClose(() => {\n\t *   room.handleClose(sessionId)\n\t * })\n\t * ```\n\t */\n\thandleClose(sessionId: string) {\n\t\tthis.cancelSession(sessionId)\n\t}\n}\n\n/** @internal */\nexport interface MinimalDocStore<R extends UnknownRecord> {\n\tget(id: string): UnknownRecord | undefined\n\tset(id: string, record: R): void\n\tdelete(id: string): void\n}\n\n/** @internal */\nexport class PresenceStore<R extends UnknownRecord> implements MinimalDocStore<R> {\n\tprivate readonly presences = new AtomMap<string, R>('presences')\n\n\tget(id: string): UnknownRecord | undefined {\n\t\treturn this.presences.get(id)\n\t}\n\n\tset(id: string, state: R): void {\n\t\tthis.presences.set(id, state)\n\t}\n\n\tdelete(id: string): void {\n\t\tthis.presences.delete(id)\n\t}\n\n\tvalues() {\n\t\treturn this.presences.values()\n\t}\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAOO;AACP,mBAUO;AACP,wBAAiC;AACjC,kBAQO;AACP,sBAAyB;AACzB,sBAOO;AACP,wBAA0E;AAC1E,yBAMO;AAEP,0BAAoF;AACpF,2BAKO;AAiCA,MAAM,iCAAiC,MAAO;AAErD,MAAM,YAAY,CAAC,SAAiB,KAAK,IAAI,IAAI;AAyH1C,MAAM,WAAiD;AAAA;AAAA,EAEpD,WAAW,oBAAI,IAAyC;AAAA,EAEzD,oBAAoB;AAAA,EAEpB,aAAmD;AAAA,EAE3D,oBAAgB,uBAAS,MAAM;AAC9B,QAAI,KAAK,YAAY;AACpB,mBAAa,KAAK,UAAU;AAC5B,WAAK,aAAa;AAAA,IACnB;AACA,eAAW,UAAU,KAAK,SAAS,OAAO,GAAG;AAC5C,cAAQ,OAAO,OAAO;AAAA,QACrB,KAAK,oCAAiB,WAAW;AAChC,gBAAM,cAAc,UAAU,OAAO,mBAAmB,IAAI,KAAK;AACjE,cAAI,eAAe,CAAC,OAAO,OAAO,QAAQ;AACzC,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC;AACA;AAAA,QACD;AAAA,QACA,KAAK,oCAAiB,wBAAwB;AAC7C,gBAAM,cAAc,UAAU,OAAO,gBAAgB,IAAI;AACzD,cAAI,eAAe,CAAC,OAAO,OAAO,QAAQ;AAEzC,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC,OAAO;AACN,iBAAK,sBAAsB;AAAA,UAC5B;AACA;AAAA,QACD;AAAA,QACA,KAAK,oCAAiB,iBAAiB;AACtC,gBAAM,cAAc,UAAU,OAAO,gBAAgB,IAAI;AACzD,cAAI,aAAa;AAChB,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC,OAAO;AACN,iBAAK,sBAAsB;AAAA,UAC5B;AACA;AAAA,QACD;AAAA,QACA,SAAS;AACR,kDAAsB,MAAM;AAAA,QAC7B;AAAA,MACD;AAAA,IACD;AAAA,EACD,GAAG,GAAI;AAAA,EAEC,wBAAwB;AAC/B,QAAI,KAAK,WAAY;AACrB,SAAK,aAAa,WAAW,KAAK,eAAe,+CAA4B,GAAG;AAAA,EACjF;AAAA,EAES,gBAAgB,IAAI,cAAiB;AAAA,EAEtC,cAAiC,CAAC;AAAA,EAElC,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,QAAQ;AACP,SAAK,YAAY,QAAQ,CAAC,MAAM,EAAE,CAAC;AACnC,SAAK,SAAS,QAAQ,CAAC,YAAY;AAClC,cAAQ,OAAO,MAAM;AAAA,IACtB,CAAC;AACD,SAAK,YAAY;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW;AACV,WAAO,KAAK;AAAA,EACb;AAAA,EAES,aAAS,oCAGf;AAAA;AAAA,EAGc;AAAA,EAER;AAAA,EAEA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EACA;AAAA,EACD;AAAA,EACQ;AAAA,EAGC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQT,cAAc,UAAyE;AAC9F,UAAM,YAAY,KAAK,kBAAkB,QAAQ;AAGjD,QAAI,CAAC,UAAW,QAAO;AAIvB,WAAO,CAAC,SAAS;AAChB,UAAI;AACH,eAAO,UAAU,IAAI;AAAA,MACtB,SAAS,GAAG;AACX,aAAK,KAAK,QAAQ,gDAAgD,CAAC;AACnE,eAAO;AAAA,MACR;AAAA,IACD;AAAA,EACD;AAAA,EAEA,YAAY,MAwBT;AACF,SAAK,SAAS,KAAK;AACnB,SAAK,MAAM,KAAK;AAChB,SAAK,mBAAmB,KAAK;AAC7B,SAAK,qBAAqB,KAAK;AAC/B,SAAK,kBAAkB,KAAK;AAC5B,SAAK,UAAU,KAAK;AACpB,SAAK,qBAAqB,KAAK,iBAAiB;AAEhD;AAAA,MACC;AAAA,MACA;AAAA,IAED;AAGA,SAAK,mBAAmB,KAAK,MAAM,KAAK,UAAU,KAAK,OAAO,UAAU,CAAC,CAAC;AAE1E,SAAK,cAAc,IAAI,IAAI,KAAK,eAAe,CAAC,CAAC;AACjD,eAAW,YAAY,KAAK,aAAa;AACxC,YAAM,WAAO,6BAAe,KAAK,OAAO,OAAO,QAAQ;AACvD,+BAAO,MAAM,4BAA4B,QAAQ,mCAAmC;AACpF;AAAA,QACC,KAAK,UAAU;AAAA,QACf,4BAA4B,QAAQ,sCAAsC,KAAK,KAAK;AAAA,MACrF;AAAA,IACD;AAGA,SAAK,gBAAgB,IAAI;AAAA,MACxB,OAAO,OAA2B,KAAK,OAAO,KAAK,EACjD,OAAO,CAAC,MAAM,EAAE,UAAU,cAAc,CAAC,KAAK,YAAY,IAAI,EAAE,QAAQ,CAAC,EACzE,IAAI,CAAC,MAAM,EAAE,QAAQ;AAAA,IACxB;AAEA,UAAM,gBAAgB,IAAI;AAAA,MACzB,OAAO,OAA2B,KAAK,OAAO,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,UAAU;AAAA,IAC1F;AAEA,QAAI,cAAc,OAAO,GAAG;AAC3B,YAAM,IAAI;AAAA,QACT,wEAAwE,cAAc,IAAI;AAAA,MAC3F;AAAA,IACD;AAEA,SAAK,eAAe,cAAc,OAAO,EAAE,KAAK,GAAG,SAAS;AAI5D,QAAI,KAAK,gBAAgB,KAAK,iBAAiB;AAC9C;AAAA,QACC,KAAC,6BAAe,KAAK,iBAAiB,KAAK,aAAa,QAAQ;AAAA,QAChE,gCAAgC,KAAK,aAAa,QAAQ;AAAA,MAC3D;AAAA,IACD;AAEA,UAAM,EAAE,cAAc,IAAI,KAAK,QAAQ,YAAY,CAAC,QAAQ;AAC3D,WAAK,OAAO,eAAe,GAAG;AAAA,IAC/B,CAAC;AAED,SAAK,oBAAoB;AAEzB,SAAK,YAAY;AAAA,MAChB,KAAK,QAAQ,SAAS,CAAC,EAAE,GAAG,MAAM;AACjC,YAAI,OAAO,KAAK,eAAe;AAC9B,eAAK,gCAAgC;AAAA,QACtC;AAAA,MACD,CAAC;AAAA,IACF;AAEA,SAAK,YAAY,KAAK,MAAM;AAC3B,WAAK,cAAc,OAAO;AAC1B,UAAI,KAAK,YAAY;AACpB,qBAAa,KAAK,UAAU;AAC5B,aAAK,aAAa;AAAA,MACnB;AAAA,IACD,CAAC;AAOD,QAAI,OAAO,SAAS,KAAK,kBAAkB,KAAK,KAAK,qBAAqB,GAAG;AAC5E,YAAM,kBAAkB,KAAK,IAAI,KAAM,KAAK,MAAM,KAAK,qBAAqB,CAAC,CAAC;AAC9E,WAAK,YAAY,SAAK,0BAAS,MAAM,KAAK,cAAc,GAAG,eAAe,CAAC;AAAA,IAC5E;AAAA,EACD;AAAA,EACQ,kCAAkC;AACzC,SAAK,QAAQ,YAAY,CAAC,QAAQ;AACjC,WAAK,iBAAiB,GAAG;AACzB,WAAK,oBAAoB,IAAI,SAAS;AAAA,IACvC,CAAC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,oBACP,WACA,SACC;AACD,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,4CAA4C,QAAQ,IAAI;AACzE;AAAA,IACD;AACA,QAAI,QAAQ,UAAU,oCAAiB,WAAW;AACjD,WAAK,KAAK,OAAO,gDAAgD,QAAQ,IAAI;AAC7E;AAAA,IACD;AACA,QAAI,QAAQ,OAAO,QAAQ;AAC1B,UAAI,QAAQ,SAAS,WAAW,QAAQ,SAAS,eAAe;AAE/D,YAAI,QAAQ,SAAS,QAAQ;AAG5B,eAAK,mBAAmB,SAAS;AAAA,QAClC;AACA,gBAAQ,OAAO,YAAY,OAAO;AAAA,MACnC,OAAO;AACN,YAAI,QAAQ,kBAAkB,MAAM;AAEnC,kBAAQ,OAAO,YAAY,EAAE,MAAM,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;AAE5D,kBAAQ,gBAAgB;AAAA,YACvB,MAAM,KAAK,mBAAmB,SAAS;AAAA,YACvC;AAAA,UACD;AAAA,QACD,OAAO;AACN,kBAAQ,wBAAwB,KAAK,OAAO;AAAA,QAC7C;AAAA,MACD;AAAA,IACD,OAAO;AACN,WAAK,cAAc,QAAQ,SAAS;AAAA,IACrC;AAAA,EACD;AAAA;AAAA;AAAA,EAIA,mBAAmB,WAAmB;AACrC,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAE3C,QAAI,CAAC,WAAW,QAAQ,UAAU,oCAAiB,WAAW;AAC7D;AAAA,IACD;AAEA,YAAQ,gBAAgB;AAExB,QAAI,QAAQ,wBAAwB,SAAS,GAAG;AAG/C,YAAM,OAAO,QAAQ;AACrB,cAAQ,0BAA0B,CAAC;AACnC,cAAQ,OAAO,YAAY,EAAE,MAAM,QAAQ,KAAK,CAAC;AAAA,IAClD;AAAA,EACD;AAAA;AAAA,EAGQ,cAAc,WAAmB,aAAsB;AAC9D,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,iCAAiC;AAClD;AAAA,IACD;AAEA,SAAK,SAAS,OAAO,SAAS;AAE9B,QAAI;AACH,UAAI,aAAa;AAChB,gBAAQ,OAAO,MAAM,+CAA2B,WAAW;AAAA,MAC5D,OAAO;AACN,gBAAQ,OAAO,MAAM;AAAA,MACtB;AAAA,IACD,QAAQ;AAAA,IAER;AAEA,UAAM,WAAW,KAAK,cAAc,IAAI,QAAQ,cAAc,EAAE;AAChE,QAAI,UAAU;AACb,WAAK,cAAc,OAAO,QAAQ,UAAW;AAE7C,WAAK,eAAe;AAAA,QACnB,MAAM,CAAC;AAAA,QACP,SAAS,CAAC,QAAQ,UAAW;AAAA,MAC9B,CAAC;AAAA,IACF;AAEA,SAAK,OAAO,KAAK,mBAAmB,EAAE,WAAW,MAAM,QAAQ,KAAK,CAAC;AACrE,QAAI,KAAK,SAAS,SAAS,GAAG;AAC7B,WAAK,OAAO,KAAK,mBAAmB;AAAA,IACrC;AAAA,EACD;AAAA,EAEQ,cAAc,WAAmB;AACxC,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb;AAAA,IACD;AAEA,QAAI,QAAQ,UAAU,oCAAiB,iBAAiB;AACvD,WAAK,KAAK,OAAO,0DAA0D;AAC3E;AAAA,IACD;AAEA,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,oCAAiB;AAAA,MACxB;AAAA,MACA,YAAY,QAAQ;AAAA,MACpB,QAAQ,QAAQ;AAAA,MAChB,kBAAkB,KAAK,IAAI;AAAA,MAC3B,MAAM,QAAQ;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,yBAAyB,QAAQ;AAAA,MACjC,sBAAsB,QAAQ;AAAA,IAC/B,CAAC;AAED,QAAI;AACH,cAAQ,OAAO,MAAM;AAAA,IACtB,QAAQ;AAAA,IAER;AAEA,SAAK,sBAAsB;AAAA,EAC5B;AAAA,EAES,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUjB,eACP,MACA,aACA,iBACC;AAED,UAAM,aAAa,mBAAe,oCAAc,IAAI;AACpD,QAAI,CAAC,WAAY,QAAO;AAExB,SAAK,SAAS,QAAQ,CAAC,YAAY;AAClC,UAAI,QAAQ,UAAU,oCAAiB,UAAW;AAClD,UAAI,oBAAoB,QAAQ,UAAW;AAC3C,UAAI,CAAC,QAAQ,OAAO,QAAQ;AAC3B,aAAK,cAAc,QAAQ,SAAS;AACpC;AAAA,MACD;AAEA,YAAM,aAAa,KAAK;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR;AAAA,MACD;AACA,UAAI,CAAC,WAAW,GAAI;AAEpB,WAAK,oBAAoB,QAAQ,WAAW;AAAA,QAC3C,MAAM;AAAA,QACN,MAAM,WAAW;AAAA,QACjB,aAAa,KAAK;AAAA,MACnB,CAAC;AAAA,IACF,CAAC;AACD,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,kBAAkB,WAAmB,MAAiB;AACrD,SAAK,oBAAoB,WAAW,EAAE,MAAM,UAAU,KAAK,CAAC;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,iBAAiB,MAMd;AACF,UAAM,EAAE,WAAW,QAAQ,MAAM,YAAY,aAAa,IAAI;AAC9D,UAAM,WAAW,KAAK,SAAS,IAAI,SAAS;AAC5C,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,oCAAiB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,YAAY,UAAU,cAAc,KAAK,cAAc,SAAS,KAAK;AAAA,MACrE,kBAAkB,KAAK,IAAI;AAAA,MAC3B;AAAA,MACA,YAAY,cAAc;AAAA,MAC1B,cAAc,gBAAgB;AAAA;AAAA,MAE9B,yBAAyB;AAAA,MACzB,sBAAsB;AAAA,IACvB,CAAC;AACD,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,qBAAqB,MAWlB;AACF,UAAM;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACD,IAAI;AAEJ,UAAM,aAAa,KAAK,OAAO,mBAAmB,gBAAgB;AAClE,UAAM,yBAAyB,WAAW,KAAK,WAAW,MAAM,SAAS,IAAI;AAE7E,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,oCAAiB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,YAAY,cAAc,KAAK,cAAc,SAAS,KAAK;AAAA,MAC3D;AAAA,MACA;AAAA,MACA,qBAAqB,KAAK,IAAI;AAAA,MAC9B,eAAe;AAAA,MACf,yBAAyB,CAAC;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,cAAc,gBAAgB;AAAA,MAC9B;AAAA,MACA;AAAA,IACD,CAAC;AAED,QAAI,kBAAkB,YAAY;AACjC,WAAK,cAAc,IAAI,YAAY,cAAmB;AAAA,IACvD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,yBAAkC;AACjC,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC7C,UAAI,QAAQ,UAAU,oCAAiB,WAAW;AACjD,YAAI,CAAC,QAAQ,sBAAsB;AAClC,iBAAO;AAAA,QACR;AAAA,MACD;AAAA,IACD;AACA,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBQ,2BACP,WACA,kBACA,wBACA,MACA,YACiD;AACjD,QAAI,CAAC,wBAAwB;AAC5B,aAAO,oBAAO,GAAG,kBAAc,oCAAc,IAAI,KAAK,CAAC,CAAC;AAAA,IACzD;AAEA,UAAM,SAAyB,CAAC;AAGhC,eAAW,CAAC,IAAI,GAAG,SAAK,uCAAyB,KAAK,IAAI,GAAG;AAC5D,UAAI,MAAM,QAAQ,GAAG,GAAG;AAEvB,cAAM,CAAC,MAAM,EAAE,IAAI;AACnB,cAAM,aAAa,KAAK,OAAO,uBAAuB,MAAM,kBAAkB,MAAM;AACpF,YAAI,WAAW,SAAS,SAAS;AAChC,eAAK,cAAc,WAAW,gDAA4B,cAAc;AACxE,iBAAO,oBAAO,IAAI,WAAW,MAAM;AAAA,QACpC;AACA,cAAM,WAAW,KAAK,OAAO,uBAAuB,IAAI,kBAAkB,MAAM;AAChF,YAAI,SAAS,SAAS,SAAS;AAC9B,eAAK,cAAc,WAAW,gDAA4B,cAAc;AACxE,iBAAO,oBAAO,IAAI,SAAS,MAAM;AAAA,QAClC;AACA,cAAM,YAAQ,wBAAW,WAAW,OAAO,SAAS,KAAK;AACzD,YAAI,OAAO;AACV,iBAAO,EAAE,IAAI,CAAC,yBAAa,OAAO,KAAK;AAAA,QACxC;AAAA,MACD,OAAO;AAEN,cAAM,kBAAkB,KAAK,OAAO,uBAAuB,KAAK,kBAAkB,MAAM;AACxF,YAAI,gBAAgB,SAAS,SAAS;AACrC,eAAK,cAAc,WAAW,gDAA4B,cAAc;AACxE,iBAAO,oBAAO,IAAI,gBAAgB,MAAM;AAAA,QACzC;AACA,eAAO,EAAE,IAAI,CAAC,yBAAa,KAAK,gBAAgB,KAAK;AAAA,MACtD;AAAA,IACD;AAGA,eAAW,MAAM,KAAK,SAAS;AAC9B,aAAO,EAAE,IAAI,CAAC,yBAAa,MAAM;AAAA,IAClC;AAEA,WAAO,oBAAO,GAAG,MAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,cAAc,WAAmB,SAAqC;AAC3E,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,uCAAuC;AACxD;AAAA,IACD;AACA,QAAI;AACH,cAAQ,QAAQ,MAAM;AAAA,QACrB,KAAK,WAAW;AACf,iBAAO,KAAK,qBAAqB,SAAS,OAAO;AAAA,QAClD;AAAA,QACA,KAAK,QAAQ;AACZ,iBAAO,KAAK,kBAAkB,SAAS,OAAO;AAAA,QAC/C;AAAA,QACA,KAAK,QAAQ;AACZ,cAAI,QAAQ,UAAU,oCAAiB,WAAW;AACjD,oBAAQ,sBAAsB,KAAK,IAAI;AAAA,UACxC;AACA,iBAAO,KAAK,oBAAoB,QAAQ,WAAW,EAAE,MAAM,OAAO,CAAC;AAAA,QACpE;AAAA,QACA,SAAS;AACR,kDAAsB,OAAO;AAAA,QAC9B;AAAA,MACD;AAAA,IACD,SAAS,GAAG;AACX,UAAI,aAAa,iCAAa;AAC7B,aAAK,cAAc,QAAQ,WAAW,EAAE,MAAM;AAAA,MAC/C,OAAO;AAEN,cAAM;AAAA,MACP;AAAA,IACD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,cAAc,WAAmB,aAAoD;AACpF,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,QAAS;AACd,QAAI,CAAC,aAAa;AACjB,WAAK,cAAc,SAAS;AAC5B;AAAA,IACD;AACA,QAAI,QAAQ,yBAAyB;AACpC,UAAI;AACH,YAAI,QAAQ,OAAO,QAAQ;AAE1B,cAAI;AACJ,kBAAQ,aAAa;AAAA,YACpB,KAAK,gDAA4B;AAEhC,6BAAe,wCAAwB;AACvC;AAAA,YACD,KAAK,gDAA4B;AAEhC,6BAAe,wCAAwB;AACvC;AAAA,YACD,KAAK,gDAA4B;AAEhC,6BAAe,wCAAwB;AACvC;AAAA,YACD;AAEC,6BAAe,wCAAwB;AACvC;AAAA,UACF;AACA,kBAAQ,OAAO,YAAY;AAAA,YAC1B,MAAM;AAAA,YACN,QAAQ;AAAA,UACT,CAAC;AAAA,QACF;AAAA,MACD,QAAQ;AAAA,MAER,UAAE;AACD,aAAK,cAAc,SAAS;AAAA,MAC7B;AAAA,IACD,OAAO;AACN,WAAK,cAAc,WAAW,WAAW;AAAA,IAC1C;AAAA,EACD;AAAA,EAEQ,oBAAoB;AAC3B,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC7C,WAAK,cAAc,QAAQ,SAAS;AAAA,IACrC;AAAA,EACD;AAAA,EAEQ,iBAAiB,KAAkC;AAC1D,UAAM,UAAU,IAAI,gBAAgB,KAAK,iBAAiB;AAC1D,QAAI,CAAC,QAAS;AACd,UAAM,EAAE,SAAS,KAAK,IAAI;AAC1B,SAAK,oBAAoB,IAAI,SAAS;AACtC,QAAI,SAAS;AAGZ,WAAK,kBAAkB;AACvB;AAAA,IACD;AACA,SAAK,eAAe,IAAI;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,yBAAyB,aAA+B;AAC/D,UAAM,YAAY,KAAK;AAEvB,QAAI,YAAY,gBAAgB,UAAU,eAAe;AACxD,aAAO,gDAA4B;AAAA,IACpC;AAEA,QAAI,YAAY,kBAAkB,KAAK,UAAU,kBAAkB,GAAG;AACrE,iBAAW,CAAC,YAAY,YAAY,KAAK,OAAO,QAAQ,YAAY,SAAS,GAAG;AAC/E,cAAM,aAAa,UAAU,UAAU,UAAU;AACjD,YAAI,eAAe,UAAa,eAAe,YAAY;AAC1D,iBAAO,gDAA4B;AAAA,QACpC;AAAA,MACD;AAAA,IACD;AACA,WAAO,gDAA4B;AAAA,EACpC;AAAA,EAEQ,qBACP,SACA,SACC;AAID,QAAI,uBAAuB,QAAQ;AAEnC,QAAI,yBAAyB,GAAG;AAC/B,6BAAuB;AAAA,IACxB;AAEA,YAAQ,0BAA0B,yBAAyB;AAC3D,QAAI,yBAAyB,GAAG;AAC/B;AAAA,IACD;AACA,QAAI,yBAAyB,GAAG;AAC/B;AACA,cAAQ,uBAAuB;AAAA,IAChC;AAEA,QAAI,wBAAwB,QAAQ,2BAAuB,0CAAyB,GAAG;AACtF,WAAK,cAAc,QAAQ,WAAW,gDAA4B,cAAc;AAChF;AAAA,IACD,WAAW,2BAAuB,0CAAyB,GAAG;AAC7D,WAAK,cAAc,QAAQ,WAAW,gDAA4B,cAAc;AAChF;AAAA,IACD;AAGA,QAAI,QAAQ,UAAU,MAAM;AAC3B,WAAK,cAAc,QAAQ,WAAW,gDAA4B,cAAc;AAChF;AAAA,IACD;AACA,UAAM,aAAa,KAAK,OAAO,mBAAmB,QAAQ,MAAM;AAChE,QAAI,CAAC,WAAW,IAAI;AACnB,WAAK,cAAc,QAAQ,WAAW,KAAK,yBAAyB,QAAQ,MAAM,CAAC;AACnF;AAAA,IACD;AAGA,QAAI,WAAW,MAAM,KAAK,CAAC,MAAM,EAAE,UAAU,YAAY,CAAC,EAAE,IAAI,GAAG;AAClE,WAAK,cAAc,QAAQ,WAAW,gDAA4B,cAAc;AAChF;AAAA,IACD;AAEA,UAAM,oBAAgB,sBAAQ,QAAQ,QAAQ,KAAK,gBAAgB,IAChE,KAAK,mBACL,QAAQ;AAEX,UAAM,yBAAyB,WAAW,MAAM,SAAS;AAEzD,UAAM,UAAU,OAAO,QAAkE;AACxF,WAAK,SAAS,IAAI,QAAQ,WAAW;AAAA,QACpC,OAAO,oCAAiB;AAAA,QACxB,WAAW,QAAQ;AAAA,QACnB,YAAY,QAAQ;AAAA,QACpB,QAAQ,QAAQ;AAAA,QAChB,kBAAkB;AAAA,QAClB;AAAA,QACA,qBAAqB,KAAK,IAAI;AAAA,QAC9B,eAAe;AAAA,QACf,yBAAyB,CAAC;AAAA,QAC1B,sBAAsB,QAAQ;AAAA,QAC9B,MAAM,QAAQ;AAAA,QACd,YAAY,QAAQ;AAAA,QACpB,cAAc,QAAQ;AAAA,QACtB,yBAAyB,QAAQ;AAAA,MAClC,CAAC;AACD,WAAK,oBAAoB,QAAQ,WAAW,GAAG;AAAA,IAChD;AAEA,UAAM,EAAE,eAAe,OAAO,IAAI,KAAK,QAAQ,YAAY,CAAC,QAAQ;AACnE,WAAK,iBAAiB,GAAG;AACzB,YAAM,aAAa,IAAI,gBAAgB,QAAQ,eAAe;AAC9D,YAAM,eAAe,KAAK;AAAA,QACzB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA;AAAA;AAAA;AAAA;AAAA,UAKC,MAAM,OAAO;AAAA,YACZ,CAAC,GAAG,KAAK,cAAc,OAAO,CAAC,EAC7B,OAAO,CAAC,MAAM,EAAE,OAAO,QAAQ,UAAU,EACzC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AAAA,UACvB;AAAA,UACA,SAAS,CAAC;AAAA,QACX;AAAA,MACD;AACA,UAAI,CAAC,aAAa,GAAI,QAAO;AAG7B,UAAI,UAAiC;AACrC,UAAI,cAAc,kBAAkB,KAAK,kBAAkB;AAC1D,cAAM,WAAW,KAAK;AAAA,UACrB,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,UACA,WAAW;AAAA,QACZ;AACA,YAAI,CAAC,SAAS,GAAI,QAAO;AACzB,kBAAU,SAAS;AAAA,MACpB,WAAW,YAAY;AACtB,sBAAU,oCAAc,WAAW,IAAI;AAAA,MACxC;AACA,aAAO;AAAA,QACN,MAAM;AAAA,QACN,kBAAkB,QAAQ;AAAA,QAC1B,eAAe,YAAY,UAAU,aAAa;AAAA,QAClD,qBAAiB,0CAAyB;AAAA,QAC1C,QAAQ,KAAK,OAAO,UAAU;AAAA,QAC9B,aAAa,IAAI,SAAS;AAAA,QAC1B,MAAM,EAAE,GAAG,aAAa,OAAO,GAAG,QAAQ;AAAA,QAC1C,YAAY,QAAQ;AAAA,QACpB,cAAc,QAAQ;AAAA,MACvB;AAAA,IACD,CAAC;AAED,SAAK,oBAAoB;AAEzB,QAAI,QAAQ;AACX,cAAQ,MAAM;AAAA,IACf;AAAA,EACD;AAAA,EAEQ,kBACP,SACA,SACC;AAED,QAAI,WAAW,QAAQ,UAAU,oCAAiB,WAAW;AAC5D;AAAA,IACD;AAEA,QAAI,SAAS;AACZ,cAAQ,sBAAsB,KAAK,IAAI;AAAA,IACxC;AAEA,UAAM,mBAAmB,CAAC,KAAK,uBAAuB;AAStD,UAAM,cAAc,CACnBA,UACA,IACA,IACA,QACA,UACI;AACJ,UAAI,CAACA,SAAQ,MAAO,CAAAA,SAAQ,QAAQ,EAAE,aAAa,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,EAAE;AACvF,MAAAA,SAAQ,MAAM,YAAY,EAAE,IAAI;AAChC,cAAQ,GAAG,CAAC,GAAG;AAAA,QACd,KAAK,yBAAa;AACjB,UAAAA,SAAQ,MAAM,KAAK,KAAK,EAAE,IAAI,GAAG,CAAC;AAClC;AAAA,QACD,KAAK,yBAAa;AACjB,mCAAO,UAAU,OAAO,2CAA2C;AACnE,UAAAA,SAAQ,MAAM,KAAK,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK;AAC5C;AAAA,QACD,KAAK,yBAAa;AACjB,UAAAA,SAAQ,MAAM,KAAK,QAAQ,KAAK,EAAE;AAClC;AAAA,QACD;AACC,kDAAsB,GAAG,CAAC,CAAC;AAAA,MAC7B;AAAA,IACD;AAEA,UAAM,cAAc,CACnB,SACAA,UACA,IACA,QACA,cACwB;AACxB,YAAM,MAAM,UACT,KAAK,OAAO,uBAAuB,QAAQ,QAAQ,kBAAkB,IAAI,IACzE,EAAE,MAAM,WAAoB,OAAO,OAAO;AAC7C,UAAI,IAAI,SAAS,SAAS;AACzB,cAAM,IAAI,gCAAY,IAAI,QAAQ,gDAA4B,cAAc;AAAA,MAC7E;AACA,UAAI,EAAE,OAAO,MAAM,IAAI;AAGvB,YAAM,MAAM,QAAQ,IAAI,EAAE;AAI1B,UAAI,WAAW;AACd,cAAMC,UAAS,UAAU,OAAO,MAAM,KAAK;AAC3C,YAAI,CAACA,QAAQ,QAAO,oBAAO,GAAG,MAAS;AACvC,YAAI,CAAC,IAAK,SAAQA;AAAA,MACnB;AAEA,UAAI,KAAK;AAGR,cAAM,iBAAa,+BAAa,6BAAe,KAAK,OAAO,OAAO,IAAI,QAAQ,CAAC;AAC/E,cAAM,WAAO,yCAAsB,KAAK,OAAO,UAAU;AACzD,YAAI,MAAM;AACT,kBAAQ,IAAI,IAAI,KAAK;AACrB,sBAAYD,UAAS,IAAI,CAAC,yBAAa,OAAO,IAAI,GAAG,KAAK,KAAK;AAAA,QAChE;AAAA,MACD,OAAO;AAIN,cAAM,iBAAa,+BAAa,6BAAe,KAAK,OAAO,OAAO,MAAM,QAAQ,CAAC;AACjF,8CAAe,OAAO,UAAU;AAChC,gBAAQ,IAAI,IAAI,KAAK;AACrB,oBAAYA,UAAS,IAAI,CAAC,yBAAa,KAAK,KAAK,GAAG,QAAW,MAAS;AAAA,MACzE;AAEA,aAAO,oBAAO,GAAG,MAAS;AAAA,IAC3B;AAEA,UAAM,gBAAgB,CACrB,SACAA,UACA,IACA,OACA,cACI;AAEJ,YAAM,MAAM,QAAQ,IAAI,EAAE;AAC1B,UAAI,CAAC,IAAK;AAEV,YAAM,iBAAa,+BAAa,6BAAe,KAAK,OAAO,OAAO,IAAI,QAAQ,CAAC;AAG/E,YAAM,aAAa,UAChB,KAAK,OAAO,uBAAuB,KAAK,QAAQ,kBAAkB,MAAM,IACxE,EAAE,MAAM,WAAoB,OAAO,IAAI;AAC1C,UAAI,WAAW,SAAS,SAAS;AAChC,cAAM,IAAI,gCAAY,WAAW,QAAQ,gDAA4B,cAAc;AAAA,MACpF;AAEA,UAAI,WAAW,UAAU,KAAK;AAE7B,cAAM,WAAO,sCAAmB,KAAK,OAAO,YAAY,gBAAgB;AACxE,YAAI,MAAM;AAET,cAAI,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAG;AAC3C,kBAAQ,IAAI,IAAI,KAAK,CAAC,CAAC;AACvB,sBAAYA,UAAS,IAAI,CAAC,yBAAa,OAAO,KAAK,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;AAAA,QACrE;AAAA,MACD,OAAO;AAIN,cAAM,cAAU,6BAAgB,WAAW,OAAO,KAAK;AAEvD,cAAM,WAAW,UACd,KAAK,OAAO,uBAAuB,SAAS,QAAQ,kBAAkB,IAAI,IAC1E,EAAE,MAAM,WAAoB,OAAO,QAAQ;AAE9C,YAAI,SAAS,SAAS,SAAS;AAC9B,gBAAM,IAAI,gCAAY,SAAS,QAAQ,gDAA4B,cAAc;AAAA,QAClF;AAEA,cAAM,WAAO,yCAAsB,KAAK,SAAS,OAAO,YAAY,gBAAgB;AACpF,YAAI,MAAM;AAET,cAAI,aAAa,CAAC,UAAU,KAAK,SAAS,KAAK,EAAG;AAClD,kBAAQ,IAAI,IAAI,SAAS,KAAK;AAC9B,sBAAYA,UAAS,IAAI,CAAC,yBAAa,OAAO,IAAI,GAAG,KAAK,SAAS,KAAK;AAAA,QACzE;AAAA,MACD;AAAA,IACD;AAEA,UAAM,EAAE,QAAQ,eAAe,QAAQ,IAAI,KAAK,QAAQ;AAAA,MACvD,CAAC,QAAQ;AACR,aAAK,iBAAiB,GAAG;AAIzB,cAAM,aAA4B,EAAE,OAAO,KAAK;AAChD,cAAM,kBAAiC,EAAE,OAAO,KAAK;AAErD,YAAI,KAAK,gBAAgB,SAAS,cAAc,cAAc,WAAW,QAAQ,UAAU;AAC1F,cAAI,CAAC,QAAS,OAAM,IAAI,MAAM,yCAAyC;AAEvE,gBAAM,KAAK,QAAQ;AACnB,gBAAM,CAAC,MAAM,GAAG,IAAI,QAAQ;AAC5B,gBAAM,EAAE,SAAS,IAAI,KAAK;AAC1B,kBAAQ,MAAM;AAAA,YACb,KAAK,yBAAa,KAAK;AAEtB,0BAAY,KAAK,eAAe,iBAAiB,IAAI;AAAA,gBACpD,GAAG;AAAA,gBACH;AAAA,gBACA;AAAA,cACD,CAAC;AACD;AAAA,YACD;AAAA,YACA,KAAK,yBAAa,OAAO;AAExB,4BAAc,KAAK,eAAe,iBAAiB,IAAI;AAAA,gBACtD,GAAG;AAAA,gBACH,IAAI,CAAC,wBAAY,KAAK,EAAE;AAAA,gBACxB,UAAU,CAAC,wBAAY,KAAK,QAAQ;AAAA,cACrC,CAAC;AACD;AAAA,YACD;AAAA,UACD;AAAA,QACD;AAKA,cAAM,WAAW,CAAC,aACjB,CAAC,YACA,KAAK,YAAY,IAAI,QAAQ,IAAI,QAAQ,iBAAiB,SAAS,CAAC,QAAQ;AAE9E,YAAI,QAAQ,MAAM;AAEjB,qBAAW,CAAC,IAAI,EAAE,SAAK,uCAAyB,QAAQ,IAAK,GAAG;AAC/D,oBAAQ,GAAG,CAAC,GAAG;AAAA,cACd,KAAK,yBAAa,KAAK;AAItB,oBAAI,CAAC,SAAS,GAAG,CAAC,EAAE,QAAQ,EAAG;AAG/B,oBACC,CAAC,KAAK,cAAc,IAAI,GAAG,CAAC,EAAE,QAAQ,KACtC,CAAC,KAAK,YAAY,IAAI,GAAG,CAAC,EAAE,QAAQ,GACnC;AACD,wBAAM,IAAI;AAAA,oBACT;AAAA,oBACA,gDAA4B;AAAA,kBAC7B;AAAA,gBACD;AACA,sBAAM,SAAS,GAAG,CAAC;AAGnB,oBAAI;AACJ,oBAAI,WAAW,KAAK,iBAAiB;AACpC,wBAAM,OAAQ,IAAI,IAAI,EAAE,KAAuB;AAK/C,sBAAI,QAAQ,KAAK,aAAa,OAAO,UAAU;AAC9C,yBAAK,KAAK;AAAA,sBACT;AAAA,sBACA,GAAG,KAAK,QAAQ,OAAO,OAAO,QAAQ;AAAA,sBACtC;AAAA,sBACA;AAAA,sBACA,QAAQ;AAAA,oBACT;AACA;AAAA,kBACD;AACA,wBAAM,eAAe,KAAK,cAAc,OAAO,QAAQ;AACvD,sBAAI,cAAc;AACjB,gCAAY,CAAC,SAAS,SAAS;AAC9B,4BAAMC,UAAS;AAAA,wBACd,UACG;AAAA,0BACA,SAAS,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,0BAC5D,MAAM;AAAA,0BACN,MAAM;AAAA,0BACN;AAAA,wBACD,IACC;AAAA,0BACA,SAAS,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,0BAC5D,MAAM;AAAA,0BACN,MAAM;AAAA,0BACN;AAAA,wBACD;AAAA,sBACH;AACA,0BAAI,CAACA,SAAQ;AACZ,6BAAK,KAAK;AAAA,0BACT;AAAA,0BACA,OAAO;AAAA,0BACP;AAAA,0BACA;AAAA,0BACA,QAAQ;AAAA,wBACT;AACA,+BAAO;AAAA,sBACR;AAEA,6BAAO,UAAU,OAAOA;AAAA,oBACzB;AAAA,kBACD;AAAA,gBACD;AACA,4BAAY,KAAK,YAAY,IAAI,QAAQ,SAAS;AAClD;AAAA,cACD;AAAA,cACA,KAAK,yBAAa,OAAO;AACxB,sBAAM,MAAM,IAAI,IAAI,EAAE;AAEtB,oBAAI,CAAC,IAAK;AACV,oBAAI,CAAC,SAAS,IAAI,QAAQ,EAAG;AAG7B,sBAAM,iBAAiB,WAAW,KAAK,cAAc,IAAI,QAAQ;AACjE,sBAAM,YAAY,iBACf,CAAC,MAAS,SAAY;AACtB,wBAAMA,UAAS,eAAe;AAAA,oBAC7B,SAAS,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,oBAC5D,MAAM;AAAA,oBACN;AAAA,oBACA;AAAA,kBACD,CAAC;AACD,sBAAI,CAACA,SAAQ;AACZ,yBAAK,KAAK;AAAA,sBACT;AAAA,sBACA,IAAI;AAAA,sBACJ;AAAA,sBACA;AAAA,sBACA,QAAQ;AAAA,oBACT;AAAA,kBACD;AACA,yBAAOA;AAAA,gBACR,IACC;AAEH,8BAAc,KAAK,YAAY,IAAI,GAAG,CAAC,GAAG,SAAS;AACnD;AAAA,cACD;AAAA,cACA,KAAK,yBAAa,QAAQ;AACzB,sBAAM,MAAM,IAAI,IAAI,EAAE;AACtB,oBAAI,CAAC,KAAK;AAET;AAAA,gBACD;AACA,oBAAI,CAAC,SAAS,IAAI,QAAQ,EAAG;AAG7B,sBAAM,kBAAkB,WAAW,KAAK,cAAc,IAAI,QAAQ;AAClE,oBACC,mBACA,CAAC,gBAAgB;AAAA,kBAChB,SAAS,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,kBAC5D,MAAM;AAAA,kBACN,MAAM;AAAA,kBACN,MAAM;AAAA,gBACP,CAAC,GACA;AACD,uBAAK,KAAK;AAAA,oBACT;AAAA,oBACA,IAAI;AAAA,oBACJ;AAAA,oBACA;AAAA,oBACA,QAAQ;AAAA,kBACT;AACA;AAAA,gBACD;AAIA,oBAAI,OAAO,EAAE;AACb,4BAAY,YAAY,IAAI,IAAI,KAAK,MAAS;AAC9C;AAAA,cACD;AAAA,YACD;AAAA,UACD;AAAA,QACD;AAEA,eAAO,EAAE,YAAY,gBAAgB;AAAA,MACtC;AAAA,MACA,EAAE,IAAI,KAAK,eAAe,aAAa,iBAAiB;AAAA,IACzD;AAEA,SAAK,oBAAoB;AAEzB,QAAI;AACJ,QAAI,WAAW,SAAS;AAEvB,aAAO,WAAW,QAAQ,EAAE,iBAAa,oCAAc,OAAO,KAAK,CAAC,GAAG,MAAM,QAAQ;AAAA,IACtF;AAEA,YAAI,sBAAQ,OAAO,WAAW,OAAO,aAAa,QAAQ,IAAI,GAAG;AAChE,mBAAa;AAAA,QACZ,MAAM;AAAA,QACN,aAAa,QAAQ;AAAA,QACrB,aAAa;AAAA,QACb,QAAQ;AAAA,MACT;AAAA,IACD,WAAW,CAAC,OAAO,WAAW,OAAO,aAAa;AACjD,mBAAa;AAAA,QACZ,MAAM;AAAA,QACN,aAAa,QAAQ;AAAA,QACrB,aAAa;AAAA,QACb,QAAQ;AAAA,MACT;AAAA,IACD,WAAW,SAAS;AAGnB,YAAM,OAAO,KAAK;AAAA,QACjB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,OAAO,WAAW,MAAM;AAAA,QACxB,OAAO,WAAW,MAAM;AAAA,MACzB;AACA,UAAI,KAAK,IAAI;AACZ,qBAAa;AAAA,UACZ,MAAM;AAAA,UACN,aAAa,QAAQ;AAAA,UACrB,aAAa;AAAA,UACb,QAAQ,EAAE,gBAAgB,KAAK,MAAM;AAAA,QACtC;AAAA,MACD;AAAA,IAED;AAEA,QAAI,WAAW,YAAY;AAC1B,WAAK,oBAAoB,QAAQ,WAAW,UAAU;AAAA,IACvD;AACA,QAAI,OAAO,WAAW,SAAS,OAAO,gBAAgB,OAAO;AAC5D,WAAK;AAAA,QACJ;AAAA,UACC,MAAM;AAAA,YACL,GAAG,OAAO,WAAW,OAAO,KAAK;AAAA,YACjC,GAAG,OAAO,gBAAgB,OAAO,KAAK;AAAA,UACvC;AAAA,UACA,SAAS;AAAA,YACR,GAAI,OAAO,WAAW,OAAO,KAAK,WAAW,CAAC;AAAA,YAC9C,GAAI,OAAO,gBAAgB,OAAO,KAAK,WAAW,CAAC;AAAA,UACpD;AAAA,QACD;AAAA,QACA;AAAA,UACC,GAAG,OAAO,WAAW,OAAO;AAAA,UAC5B,GAAG,OAAO,gBAAgB,OAAO;AAAA,QAClC;AAAA,QACA,SAAS;AAAA,MACV;AAAA,IACD;AAEA,QAAI,OAAO,gBAAgB,OAAO;AACjC,qBAAe,MAAM;AACpB,aAAK,mBAAmB;AAAA,MACzB,CAAC;AAAA,IACF;AAEA,QAAI,OAAO,WAAW,SAAS,KAAK,oBAAoB;AACvD,YAAM,OAAO,OAAO,WAAW,MAAM;AACrC,qBAAe,MAAM;AACpB,YAAI;AACH,eAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAAA,QAClD,SAAS,GAAG;AACX,eAAK,KAAK,QAAQ,4BAA4B,CAAC;AAAA,QAChD;AAAA,MACD,CAAC;AAAA,IACF;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,YAAY,WAAmB;AAC9B,SAAK,cAAc,SAAS;AAAA,EAC7B;AACD;AAUO,MAAM,cAAqE;AAAA,EAChE,YAAY,IAAI,qBAAmB,WAAW;AAAA,EAE/D,IAAI,IAAuC;AAC1C,WAAO,KAAK,UAAU,IAAI,EAAE;AAAA,EAC7B;AAAA,EAEA,IAAI,IAAY,OAAgB;AAC/B,SAAK,UAAU,IAAI,IAAI,KAAK;AAAA,EAC7B;AAAA,EAEA,OAAO,IAAkB;AACxB,SAAK,UAAU,OAAO,EAAE;AAAA,EACzB;AAAA,EAEA,SAAS;AACR,WAAO,KAAK,UAAU,OAAO;AAAA,EAC9B;AACD;",
+  "sourcesContent": ["import {\n\tAtomMap,\n\tMigrationFailureReason,\n\tRecordType,\n\tSerializedSchema,\n\tStoreSchema,\n\tUnknownRecord,\n} from '@tldraw/store'\nimport {\n\tassert,\n\tassertExists,\n\texhaustiveSwitchError,\n\tgetOwnProperty,\n\tisEqual,\n\tisNativeStructuredClone,\n\tobjectMapEntriesIterable,\n\tResult,\n\tthrottle,\n} from '@tldraw/utils'\nimport { createNanoEvents } from 'nanoevents'\nimport {\n\tapplyObjectDiff,\n\tdiffRecord,\n\tNetworkDiff,\n\tObjectDiff,\n\tRecordOp,\n\tRecordOpType,\n\tValueOpType,\n} from './diff'\nimport { interval } from './interval'\nimport {\n\tgetTlsyncProtocolVersion,\n\tTLIncompatibilityReason,\n\tTLObjectStoreAccess,\n\tTLSocketClientSentEvent,\n\tTLSocketServerSentDataEvent,\n\tTLSocketServerSentEvent,\n} from './protocol'\nimport { applyAndDiffRecord, diffAndValidateRecord, validateRecord } from './recordDiff'\nimport {\n\tRoomSession,\n\tRoomSessionState,\n\tSESSION_IDLE_TIMEOUT,\n\tSESSION_REMOVAL_WAIT_TIME,\n\tSESSION_START_WAIT_TIME,\n} from './RoomSession'\nimport { TLSyncLog } from './TLSocketRoom'\nimport { TLSyncError, TLSyncErrorCloseEventCode, TLSyncErrorCloseEventReason } from './TLSyncClient'\nimport {\n\tTLSyncForwardDiff,\n\tTLSyncStorage,\n\tTLSyncStorageTransaction,\n\ttoNetworkDiff,\n} from './TLSyncStorage'\n\n/**\n * WebSocket interface for server-side room connections. This defines the contract\n * that socket implementations must follow to work with TLSyncRoom.\n *\n * @internal\n */\nexport interface TLRoomSocket<R extends UnknownRecord> {\n\t/**\n\t * Whether the socket connection is currently open and ready to send messages.\n\t */\n\tisOpen: boolean\n\t/**\n\t * Send a message to the connected client through this socket.\n\t *\n\t * @param msg - The server-sent event message to transmit\n\t */\n\tsendMessage(msg: TLSocketServerSentEvent<R>): void\n\t/**\n\t * Close the socket connection with optional status code and reason.\n\t *\n\t * @param code - WebSocket close code (optional)\n\t * @param reason - Human-readable close reason (optional)\n\t */\n\tclose(code?: number, reason?: string): void\n}\n\n/**\n * The minimum time interval (in milliseconds) between sending batched data messages\n * to clients. This debouncing prevents overwhelming clients with rapid updates.\n * @public\n */\nexport const DATA_MESSAGE_DEBOUNCE_INTERVAL = 1000 / 60\n\nconst timeSince = (time: number) => Date.now() - time\n\n/**\n * Snapshot of a room's complete state that can be persisted and restored.\n * Contains all documents, tombstones, and metadata needed to reconstruct the room.\n *\n * @public\n */\nexport interface RoomSnapshot {\n\t/**\n\t * The current logical clock value for the room\n\t */\n\tclock?: number\n\t/**\n\t * Clock value when document data was last changed (optional for backwards compatibility)\n\t */\n\tdocumentClock?: number\n\t/**\n\t * Array of all document records with their last modification clocks\n\t */\n\tdocuments: Array<{ state: UnknownRecord; lastChangedClock: number }>\n\t/**\n\t * Map of deleted record IDs to their deletion clock values (optional)\n\t */\n\ttombstones?: Record<string, number>\n\t/**\n\t * Clock value where tombstone history begins - older deletions are not tracked (optional)\n\t */\n\ttombstoneHistoryStartsAtClock?: number\n\t/**\n\t * Serialized schema used when creating this snapshot (optional)\n\t */\n\tschema?: SerializedSchema\n}\n\n/**\n * Authorizes a single record write from a client: any per-record, per-session rule the host wants\n * to enforce server-side \u2014 veto writes the session isn't allowed to make, or rewrite the record on\n * create. The session's `meta` carries whatever the rule needs (identity, roles, \u2026); for example,\n * force a comment's `authorId` to the signed-in user so nobody can post in someone else's name.\n *\n * Called on **create**, **update**, and **delete** of records whose `typeName` it's registered for\n * (see {@link TLRecordAuthorizers}), and only for client pushes \u2014 never for server-initiated writes.\n *\n * `prev` and `next` are always at the **server's** schema version: client writes are migrated\n * before the authorizer runs, so guarding or stamping a field never requires knowing what older\n * clients call it. On create, the record you return is what gets stored (after validation) \u2014 no\n * migration runs afterwards, so stamped fields can't be clobbered.\n *\n * Return `null` to reject the write \u2014 it's skipped and the client self-corrects, exactly like the\n * `objectAccess` gate. Otherwise the write is allowed, and:\n *\n * - on **create**, the record you return is what gets stored, so stamp identity fields here (e.g.\n *   set `authorId` from `session.meta`);\n * - on **update** and **delete**, only allow-vs-reject is used (the returned record's contents are\n *   ignored), so use them to veto changes to immutable fields or unauthorized deletes \u2014 return\n *   `next`/`prev` to allow, `null` to reject.\n *\n * \u26A0\uFE0E Runs synchronously inside the commit transaction, on the same path as every document edit \u2014 it\n * must be fast and do **no** I/O. `next`/`prev` are client-controlled records, so treat their\n * contents as untrusted; prefer returning `null` to reject over throwing, though a throw is\n * caught, logged, and treated as a rejection (fail closed) rather than crashing the push. For\n * expensive, async checks (e.g. resolving mentions against who can access a file), react after the\n * fact via `onCommittedChanges`.\n *\n * @public\n */\nexport type TLRecordAuthorizer<Rec extends UnknownRecord, SessionMeta> = (\n\targs: {\n\t\t/** The session performing the write: its host-provided `meta` (e.g. the authenticated user\n\t\t *  id) and the canvas-lane `isReadonly` state, for hosts whose object-lane policy follows\n\t\t *  canvas access. */\n\t\tsession: { sessionId: string; isReadonly: boolean; meta: SessionMeta }\n\t} & (\n\t\t| { type: 'create'; prev: null; next: Rec }\n\t\t| { type: 'update'; prev: Rec; next: Rec }\n\t\t| { type: 'delete'; prev: Rec; next: null }\n\t)\n) => Rec | null\n\n/**\n * A map from record `typeName` to a {@link TLRecordAuthorizer} for that record type. Only listed\n * types are authorized; every other record writes through untouched, so this stays off the hot path\n * for the vast majority of writes (shape drags etc.).\n *\n * Each authorizer is typed to its record \u2014 e.g. `next` in the `comment` entry is a `TLComment` \u2014 so\n * renaming a field on the record makes the authorizer that reads it fail to compile, rather than\n * silently stamp or guard the wrong field.\n *\n * Presence records are never authorized (presence is per-session and ephemeral); registering the\n * presence typeName is a construction-time error.\n *\n * @public\n */\nexport type TLRecordAuthorizers<R extends UnknownRecord, SessionMeta> = {\n\t[K in R['typeName']]?: TLRecordAuthorizer<Extract<R, { typeName: K }>, SessionMeta>\n}\n\n/**\n * A collaborative workspace that manages multiple client sessions and synchronizes\n * document changes between them. The room serves as the authoritative source for\n * all document state and handles conflict resolution, schema migrations, and\n * real-time data distribution.\n *\n * @example\n * ```ts\n * const room = new TLSyncRoom({\n *   schema: mySchema,\n *   onDataChange: () => saveToDatabase(room.getSnapshot()),\n *   onPresenceChange: () => updateLiveCursors()\n * })\n *\n * // Handle new client connections\n * room.handleNewSession({\n *   sessionId: 'user-123',\n *   socket: webSocketAdapter,\n *   meta: { userId: '123', name: 'Alice' },\n *   isReadonly: false\n * })\n * ```\n *\n * @internal\n */\nexport class TLSyncRoom<R extends UnknownRecord, SessionMeta> {\n\t// A table of connected clients\n\treadonly sessions = new Map<string, RoomSession<R, SessionMeta>>()\n\n\tprivate lastDocumentClock = 0\n\n\tprivate pruneTimer: ReturnType<typeof setTimeout> | null = null\n\n\tpruneSessions = throttle(() => {\n\t\tif (this.pruneTimer) {\n\t\t\tclearTimeout(this.pruneTimer)\n\t\t\tthis.pruneTimer = null\n\t\t}\n\t\tfor (const client of this.sessions.values()) {\n\t\t\tswitch (client.state) {\n\t\t\t\tcase RoomSessionState.Connected: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.lastInteractionTime) > this.sessionIdleTimeout\n\t\t\t\t\tif (hasTimedOut || !client.socket.isOpen) {\n\t\t\t\t\t\tthis.cancelSession(client.sessionId)\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tcase RoomSessionState.AwaitingConnectMessage: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.sessionStartTime) > SESSION_START_WAIT_TIME\n\t\t\t\t\tif (hasTimedOut || !client.socket.isOpen) {\n\t\t\t\t\t\t// remove immediately\n\t\t\t\t\t\tthis.removeSession(client.sessionId)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tthis.scheduleFollowUpPrune()\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tcase RoomSessionState.AwaitingRemoval: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.cancellationTime) > SESSION_REMOVAL_WAIT_TIME\n\t\t\t\t\tif (hasTimedOut) {\n\t\t\t\t\t\tthis.removeSession(client.sessionId)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tthis.scheduleFollowUpPrune()\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tdefault: {\n\t\t\t\t\texhaustiveSwitchError(client)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}, 1000)\n\n\tprivate scheduleFollowUpPrune() {\n\t\tif (this.pruneTimer) return\n\t\tthis.pruneTimer = setTimeout(this.pruneSessions, SESSION_REMOVAL_WAIT_TIME + 100)\n\t}\n\n\treadonly presenceStore = new PresenceStore<R>()\n\n\tprivate disposables: Array<() => void> = []\n\n\tprivate _isClosed = false\n\n\t/**\n\t * Close the room and clean up all resources. Disconnects all sessions\n\t * and stops background processes.\n\t */\n\tclose() {\n\t\tthis.disposables.forEach((d) => d())\n\t\tthis.sessions.forEach((session) => {\n\t\t\tsession.socket.close()\n\t\t})\n\t\tthis._isClosed = true\n\t}\n\n\t/**\n\t * Check if the room has been closed and is no longer accepting connections.\n\t *\n\t * @returns True if the room is closed\n\t */\n\tisClosed() {\n\t\treturn this._isClosed\n\t}\n\n\treadonly events = createNanoEvents<{\n\t\troom_became_empty(): void\n\t\tsession_removed(args: { sessionId: string; meta: SessionMeta }): void\n\t}>()\n\n\t// Storage layer for documents, tombstones, and clocks\n\tprivate readonly storage: TLSyncStorage<R>\n\n\treadonly serializedSchema: SerializedSchema\n\n\treadonly documentTypes: Set<string>\n\t/**\n\t * Record types served by the object-store lane. Object records ride the same wire messages\n\t * as document records but are gated by the session's `objectAccess` instead of `isReadonly`,\n\t * and are excluded from `documentTypes` so hosts can persist them in a separate lane.\n\t */\n\treadonly objectTypes: Set<string>\n\treadonly presenceType: RecordType<R, any> | null\n\tprivate log?: TLSyncLog\n\tpublic readonly schema: StoreSchema<R, any>\n\tprivate onPresenceChange?(): void\n\tprivate onCommittedChanges?(args: { diff: TLSyncForwardDiff<R>; documentClock: number }): void\n\tprivate readonly authorizeRecord?: TLRecordAuthorizers<R, SessionMeta>\n\tprivate readonly sessionIdleTimeout: number\n\n\t/**\n\t * The authorizer registered for a record type, widened to the room's record union. Each entry in\n\t * `authorizeRecord` is typed to its specific record; the cast here is the one place we can't\n\t * statically correlate a runtime `typeName` with its record type, so it lives in the library\n\t * rather than in every consumer.\n\t */\n\tprivate authorizerFor(typeName: R['typeName']): TLRecordAuthorizer<R, SessionMeta> | undefined {\n\t\tconst authorize = this.authorizeRecord?.[typeName] as\n\t\t\t| TLRecordAuthorizer<R, SessionMeta>\n\t\t\t| undefined\n\t\tif (!authorize) return undefined\n\t\t// Fail closed: an authorizer that throws rejects the write (and is logged) rather than\n\t\t// aborting the whole push. Authorizers are security-sensitive, so a bug must never let a\n\t\t// write through.\n\t\treturn (args) => {\n\t\t\ttry {\n\t\t\t\treturn authorize(args)\n\t\t\t} catch (e) {\n\t\t\t\tthis.log?.error?.('record authorizer threw; rejecting the write', e)\n\t\t\t\treturn null\n\t\t\t}\n\t\t}\n\t}\n\n\tconstructor(opts: {\n\t\tlog?: TLSyncLog\n\t\tschema: StoreSchema<R, any>\n\t\tonPresenceChange?(): void\n\t\t/**\n\t\t * Called once after a client push commits, with the committed document diff. Fires for\n\t\t * local and remote pushes. Use this to react to document changes (e.g. persist certain\n\t\t * record types to a separate lane, or project them to an external store) as soon as they\n\t\t * commit. Best-effort \u2014 do not throw; do not block.\n\t\t */\n\t\tonCommittedChanges?(args: { diff: TLSyncForwardDiff<R>; documentClock: number }): void\n\t\t/**\n\t\t * Record type names to serve through the object-store lane instead of the document lane.\n\t\t * Each must be a document-scoped type registered in the schema. Object-lane writes are\n\t\t * gated per session by `objectAccess` rather than `isReadonly`.\n\t\t */\n\t\tobjectTypes?: readonly string[]\n\t\t/**\n\t\t * Per-type authorizers for client record writes (create, update, delete): veto or, on\n\t\t * create, rewrite. See {@link TLRecordAuthorizers}.\n\t\t */\n\t\tauthorizeRecord?: TLRecordAuthorizers<R, SessionMeta>\n\t\tstorage: TLSyncStorage<R>\n\t\tclientTimeout?: number\n\t}) {\n\t\tthis.schema = opts.schema\n\t\tthis.log = opts.log\n\t\tthis.onPresenceChange = opts.onPresenceChange\n\t\tthis.onCommittedChanges = opts.onCommittedChanges\n\t\tthis.authorizeRecord = opts.authorizeRecord\n\t\tthis.storage = opts.storage\n\t\tthis.sessionIdleTimeout = opts.clientTimeout ?? SESSION_IDLE_TIMEOUT\n\n\t\tassert(\n\t\t\tisNativeStructuredClone,\n\t\t\t'TLSyncRoom is supposed to run either on Cloudflare Workers' +\n\t\t\t\t'or on a 18+ version of Node.js, which both support the native structuredClone API'\n\t\t)\n\n\t\t// do a json serialization cycle to make sure the schema has no 'undefined' values\n\t\tthis.serializedSchema = JSON.parse(JSON.stringify(this.schema.serialize()))\n\n\t\tthis.objectTypes = new Set(opts.objectTypes ?? [])\n\t\tfor (const typeName of this.objectTypes) {\n\t\t\tconst type = getOwnProperty(this.schema.types, typeName)\n\t\t\tassert(type, `TLSyncRoom: object type '${typeName}' is not registered in the schema`)\n\t\t\tassert(\n\t\t\t\ttype.scope === 'document',\n\t\t\t\t`TLSyncRoom: object type '${typeName}' must have scope 'document', got '${type.scope}'`\n\t\t\t)\n\t\t}\n\n\t\t// object-lane types are partitioned out of the document lane\n\t\tthis.documentTypes = new Set(\n\t\t\tObject.values<RecordType<R, any>>(this.schema.types)\n\t\t\t\t.filter((t) => t.scope === 'document' && !this.objectTypes.has(t.typeName))\n\t\t\t\t.map((t) => t.typeName)\n\t\t)\n\n\t\tconst presenceTypes = new Set(\n\t\t\tObject.values<RecordType<R, any>>(this.schema.types).filter((t) => t.scope === 'presence')\n\t\t)\n\n\t\tif (presenceTypes.size > 1) {\n\t\t\tthrow new Error(\n\t\t\t\t`TLSyncRoom: exactly zero or one presence type is expected, but found ${presenceTypes.size}`\n\t\t\t)\n\t\t}\n\n\t\tthis.presenceType = presenceTypes.values().next()?.value ?? null\n\n\t\t// The presence lane never consults authorizers, so a presence key in `authorizeRecord`\n\t\t// would be a silent no-op \u2014 fail loudly at construction instead.\n\t\tif (this.presenceType && this.authorizeRecord) {\n\t\t\tassert(\n\t\t\t\t!getOwnProperty(this.authorizeRecord, this.presenceType.typeName),\n\t\t\t\t`TLSyncRoom: authorizeRecord['${this.presenceType.typeName}'] is a presence type; presence records are not authorized`\n\t\t\t)\n\t\t}\n\n\t\tconst { documentClock } = this.storage.transaction((txn) => {\n\t\t\tthis.schema.migrateStorage(txn)\n\t\t})\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tthis.disposables.push(\n\t\t\tthis.storage.onChange(({ id }) => {\n\t\t\t\tif (id !== this.internalTxnId) {\n\t\t\t\t\tthis.broadcastExternalStorageChanges()\n\t\t\t\t}\n\t\t\t})\n\t\t)\n\n\t\tthis.disposables.push(() => {\n\t\t\tthis.pruneSessions.cancel()\n\t\t\tif (this.pruneTimer) {\n\t\t\t\tclearTimeout(this.pruneTimer)\n\t\t\t\tthis.pruneTimer = null\n\t\t\t}\n\t\t})\n\n\t\t// When clientTimeout is finite, run periodic pruning so idle sessions are\n\t\t// cleaned up even with no traffic. When Infinity or 0 we skip the interval\n\t\t// (e.g. for hibernation); without it, pruning only runs on message or when\n\t\t// socket close/error triggers cancelSession, so pruning idle sessions\n\t\t// reliably depends on the runtime delivering those events.\n\t\tif (Number.isFinite(this.sessionIdleTimeout) && this.sessionIdleTimeout > 0) {\n\t\t\tconst pruneIntervalMs = Math.min(2000, Math.floor(this.sessionIdleTimeout / 4))\n\t\t\tthis.disposables.push(interval(() => this.pruneSessions(), pruneIntervalMs))\n\t\t}\n\t}\n\tprivate broadcastExternalStorageChanges() {\n\t\tthis.storage.transaction((txn) => {\n\t\t\tthis.broadcastChanges(txn)\n\t\t\tthis.lastDocumentClock = txn.getClock()\n\t\t}) // no id needed because this only reads, no writes.\n\t}\n\n\t/**\n\t * Send a message to a particular client. Debounces data events\n\t *\n\t * @param sessionId - The id of the session to send the message to.\n\t * @param message - The message to send. UNSAFE Any diffs must have been downgraded already if necessary\n\t */\n\tprivate _unsafe_sendMessage(\n\t\tsessionId: string,\n\t\tmessage: TLSocketServerSentEvent<R> | TLSocketServerSentDataEvent<R>\n\t) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Tried to send message to unknown session', message.type)\n\t\t\treturn\n\t\t}\n\t\tif (session.state !== RoomSessionState.Connected) {\n\t\t\tthis.log?.warn?.('Tried to send message to disconnected client', message.type)\n\t\t\treturn\n\t\t}\n\t\tif (session.socket.isOpen) {\n\t\t\tif (message.type !== 'patch' && message.type !== 'push_result') {\n\t\t\t\t// this is not a data message\n\t\t\t\tif (message.type !== 'pong') {\n\t\t\t\t\t// non-data messages like \"connect\" might still need to be ordered correctly with\n\t\t\t\t\t// respect to data messages, so it's better to flush just in case\n\t\t\t\t\tthis._flushDataMessages(sessionId)\n\t\t\t\t}\n\t\t\t\tsession.socket.sendMessage(message)\n\t\t\t} else {\n\t\t\t\tif (session.debounceTimer === null) {\n\t\t\t\t\t// this is the first message since the last flush, don't delay it\n\t\t\t\t\tsession.socket.sendMessage({ type: 'data', data: [message] })\n\n\t\t\t\t\tsession.debounceTimer = setTimeout(\n\t\t\t\t\t\t() => this._flushDataMessages(sessionId),\n\t\t\t\t\t\tDATA_MESSAGE_DEBOUNCE_INTERVAL\n\t\t\t\t\t)\n\t\t\t\t} else {\n\t\t\t\t\tsession.outstandingDataMessages.push(message)\n\t\t\t\t}\n\t\t\t}\n\t\t} else {\n\t\t\tthis.cancelSession(session.sessionId)\n\t\t}\n\t}\n\n\t// needs to accept sessionId and not a session because the session might be dead by the time\n\t// the timer fires\n\t_flushDataMessages(sessionId: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\n\t\tif (!session || session.state !== RoomSessionState.Connected) {\n\t\t\treturn\n\t\t}\n\n\t\tsession.debounceTimer = null\n\n\t\tif (session.outstandingDataMessages.length > 0) {\n\t\t\t// hand the buffer over and start a fresh one, rather than truncating in\n\t\t\t// place, so sockets that defer serialization don't see an emptied array\n\t\t\tconst data = session.outstandingDataMessages\n\t\t\tsession.outstandingDataMessages = []\n\t\t\tsession.socket.sendMessage({ type: 'data', data })\n\t\t}\n\t}\n\n\t/** @internal */\n\tprivate removeSession(sessionId: string, fatalReason?: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Tried to remove unknown session')\n\t\t\treturn\n\t\t}\n\n\t\tthis.sessions.delete(sessionId)\n\n\t\ttry {\n\t\t\tif (fatalReason) {\n\t\t\t\tsession.socket.close(TLSyncErrorCloseEventCode, fatalReason)\n\t\t\t} else {\n\t\t\t\tsession.socket.close()\n\t\t\t}\n\t\t} catch {\n\t\t\t// noop, calling .close() multiple times is fine\n\t\t}\n\n\t\tconst presence = this.presenceStore.get(session.presenceId ?? '')\n\t\tif (presence) {\n\t\t\tthis.presenceStore.delete(session.presenceId!)\n\t\t\t// Broadcast presence removal - use RecordsDiff with the removed record\n\t\t\tthis.broadcastPatch({\n\t\t\t\tputs: {},\n\t\t\t\tdeletes: [session.presenceId!],\n\t\t\t})\n\t\t}\n\n\t\tthis.events.emit('session_removed', { sessionId, meta: session.meta })\n\t\tif (this.sessions.size === 0) {\n\t\t\tthis.events.emit('room_became_empty')\n\t\t}\n\t}\n\n\tprivate cancelSession(sessionId: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\treturn\n\t\t}\n\n\t\tif (session.state === RoomSessionState.AwaitingRemoval) {\n\t\t\tthis.log?.warn?.('Tried to cancel session that is already awaiting removal')\n\t\t\treturn\n\t\t}\n\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.AwaitingRemoval,\n\t\t\tsessionId,\n\t\t\tpresenceId: session.presenceId,\n\t\t\tsocket: session.socket,\n\t\t\tcancellationTime: Date.now(),\n\t\t\tmeta: session.meta,\n\t\t\tisReadonly: session.isReadonly,\n\t\t\tobjectAccess: session.objectAccess,\n\t\t\trequiresLegacyRejection: session.requiresLegacyRejection,\n\t\t\tsupportsStringAppend: session.supportsStringAppend,\n\t\t})\n\n\t\ttry {\n\t\t\tsession.socket.close()\n\t\t} catch {\n\t\t\t// noop, calling .close() multiple times is fine\n\t\t}\n\n\t\tthis.scheduleFollowUpPrune()\n\t}\n\n\treadonly internalTxnId = 'TLSyncRoom.txn'\n\n\t/**\n\t * Broadcast a patch to all connected clients except the one with the sessionId provided.\n\t *\n\t * @param diff - The TLSyncForwardDiff with full records (used for migration)\n\t * @param networkDiff - Optional pre-computed NetworkDiff for sessions not needing migration.\n\t *                      If not provided, will be computed from recordsDiff.\n\t * @param sourceSessionId - Optional session ID to exclude from the broadcast\n\t */\n\tprivate broadcastPatch(\n\t\tdiff: TLSyncForwardDiff<R>,\n\t\tnetworkDiff?: NetworkDiff<R> | null,\n\t\tsourceSessionId?: string\n\t) {\n\t\t// Pre-compute network diff if not provided\n\t\tconst unmigrated = networkDiff ?? toNetworkDiff(diff)\n\t\tif (!unmigrated) return this\n\n\t\tthis.sessions.forEach((session) => {\n\t\t\tif (session.state !== RoomSessionState.Connected) return\n\t\t\tif (sourceSessionId === session.sessionId) return\n\t\t\tif (!session.socket.isOpen) {\n\t\t\t\tthis.cancelSession(session.sessionId)\n\t\t\t\treturn\n\t\t\t}\n\n\t\t\tconst diffResult = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsession.serializedSchema,\n\t\t\t\tsession.requiresDownMigrations,\n\t\t\t\tdiff\n\t\t\t)\n\t\t\tif (!diffResult.ok) return\n\n\t\t\tthis._unsafe_sendMessage(session.sessionId, {\n\t\t\t\ttype: 'patch',\n\t\t\t\tdiff: diffResult.value,\n\t\t\t\tserverClock: this.lastDocumentClock,\n\t\t\t})\n\t\t})\n\t\treturn this\n\t}\n\n\t/**\n\t * Send a custom message to a connected client. Useful for application-specific\n\t * communication that doesn't involve document synchronization.\n\t *\n\t * @param sessionId - The ID of the session to send the message to\n\t * @param data - The custom payload to send (will be JSON serialized)\n\t * @example\n\t * ```ts\n\t * // Send a custom notification\n\t * room.sendCustomMessage('user-123', {\n\t *   type: 'notification',\n\t *   message: 'Document saved successfully'\n\t * })\n\t *\n\t * // Send user-specific data\n\t * room.sendCustomMessage('user-456', {\n\t *   type: 'user_permissions',\n\t *   canEdit: true,\n\t *   canDelete: false\n\t * })\n\t * ```\n\t */\n\tsendCustomMessage(sessionId: string, data: any): void {\n\t\tthis._unsafe_sendMessage(sessionId, { type: 'custom', data })\n\t}\n\n\t/**\n\t * Register a new client session with the room. The session will be in an awaiting\n\t * state until it sends a connect message with protocol handshake.\n\t *\n\t * @param opts - Session configuration\n\t *   - sessionId - Unique identifier for this session\n\t *   - socket - WebSocket adapter for communication\n\t *   - meta - Application-specific metadata for this session\n\t *   - isReadonly - Whether this session can modify documents\n\t * @returns This room instance for method chaining\n\t * @example\n\t * ```ts\n\t * room.handleNewSession({\n\t *   sessionId: crypto.randomUUID(),\n\t *   socket: new WebSocketAdapter(ws),\n\t *   meta: { userId: '123', name: 'Alice', avatar: 'url' },\n\t *   isReadonly: !hasEditPermission\n\t * })\n\t * ```\n\t *\n\t * @internal\n\t */\n\thandleNewSession(opts: {\n\t\tsessionId: string\n\t\tsocket: TLRoomSocket<R>\n\t\tmeta: SessionMeta\n\t\tisReadonly: boolean\n\t\tobjectAccess?: TLObjectStoreAccess\n\t}) {\n\t\tconst { sessionId, socket, meta, isReadonly, objectAccess } = opts\n\t\tconst existing = this.sessions.get(sessionId)\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.AwaitingConnectMessage,\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tpresenceId: existing?.presenceId ?? this.presenceType?.createId() ?? null,\n\t\t\tsessionStartTime: Date.now(),\n\t\t\tmeta,\n\t\t\tisReadonly: isReadonly ?? false,\n\t\t\tobjectAccess: objectAccess ?? 'write',\n\t\t\t// this gets set later during handleConnectMessage\n\t\t\trequiresLegacyRejection: false,\n\t\t\tsupportsStringAppend: true,\n\t\t})\n\t\treturn this\n\t}\n\n\t/**\n\t * Resume a previously-connected session directly into `Connected` state, bypassing the\n\t * connect handshake. Used after server hibernation when the WebSocket is still alive but\n\t * all in-memory state has been lost.\n\t *\n\t * @internal\n\t */\n\thandleResumedSession(opts: {\n\t\tsessionId: string\n\t\tsocket: TLRoomSocket<R>\n\t\tmeta: SessionMeta\n\t\tisReadonly: boolean\n\t\tobjectAccess?: TLObjectStoreAccess\n\t\tserializedSchema: SerializedSchema\n\t\tpresenceId: string | null\n\t\tpresenceRecord: UnknownRecord | null\n\t\trequiresLegacyRejection: boolean\n\t\tsupportsStringAppend: boolean\n\t}) {\n\t\tconst {\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tmeta,\n\t\t\tisReadonly,\n\t\t\tobjectAccess,\n\t\t\tserializedSchema,\n\t\t\tpresenceId,\n\t\t\tpresenceRecord,\n\t\t\trequiresLegacyRejection,\n\t\t\tsupportsStringAppend,\n\t\t} = opts\n\n\t\tconst migrations = this.schema.getMigrationsSince(serializedSchema)\n\t\tconst requiresDownMigrations = migrations.ok ? migrations.value.length > 0 : false\n\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.Connected,\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tpresenceId: presenceId ?? this.presenceType?.createId() ?? null,\n\t\t\tserializedSchema,\n\t\t\trequiresDownMigrations,\n\t\t\tlastInteractionTime: Date.now(),\n\t\t\tdebounceTimer: null,\n\t\t\toutstandingDataMessages: [],\n\t\t\tmeta,\n\t\t\tisReadonly,\n\t\t\tobjectAccess: objectAccess ?? 'write',\n\t\t\trequiresLegacyRejection,\n\t\t\tsupportsStringAppend,\n\t\t})\n\n\t\tif (presenceRecord && presenceId) {\n\t\t\tthis.presenceStore.set(presenceId, presenceRecord as R)\n\t\t}\n\t}\n\n\t/**\n\t * Checks if all connected sessions support string append operations (protocol version 8+).\n\t * If any client is on an older version, returns false to enable legacy append mode.\n\t *\n\t * @returns True if all connected sessions are on protocol version 8 or higher\n\t */\n\tgetCanEmitStringAppend(): boolean {\n\t\tfor (const session of this.sessions.values()) {\n\t\t\tif (session.state === RoomSessionState.Connected) {\n\t\t\t\tif (!session.supportsStringAppend) {\n\t\t\t\t\treturn false\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn true\n\t}\n\n\t/**\n\t * When we send a diff to a client, if that client is on a lower version than us, we need to make\n\t * the diff compatible with their version. This method takes a TLSyncForwardDiff (which has full\n\t * records) and migrates all records down to the client's schema version, returning a NetworkDiff.\n\t *\n\t * For updates (entries with [before, after] tuples), both records are migrated and a patch is\n\t * computed from the migrated versions, preserving efficient patch semantics even across versions.\n\t *\n\t * If a migration fails, the session will be rejected.\n\t *\n\t * @param sessionId - The session ID (for rejection on migration failure)\n\t * @param serializedSchema - The client's schema to migrate to\n\t * @param requiresDownMigrations - Whether the client needs down migrations\n\t * @param diff - The TLSyncForwardDiff containing full records to migrate\n\t * @param unmigrated - Optional pre-computed NetworkDiff for when no migration is needed\n\t * @returns A NetworkDiff with migrated records, or a migration failure\n\t */\n\tprivate migrateDiffOrRejectSession(\n\t\tsessionId: string,\n\t\tserializedSchema: SerializedSchema,\n\t\trequiresDownMigrations: boolean,\n\t\tdiff: TLSyncForwardDiff<R>,\n\t\tunmigrated?: NetworkDiff<R>\n\t): Result<NetworkDiff<R>, MigrationFailureReason> {\n\t\tif (!requiresDownMigrations) {\n\t\t\treturn Result.ok(unmigrated ?? toNetworkDiff(diff) ?? {})\n\t\t}\n\n\t\tconst result: NetworkDiff<R> = {}\n\n\t\t// Migrate puts (either adds or updates)\n\t\tfor (const [id, put] of objectMapEntriesIterable(diff.puts)) {\n\t\t\tif (Array.isArray(put)) {\n\t\t\t\t// Update: [before, after] tuple - migrate both and compute patch\n\t\t\t\tconst [from, to] = put\n\t\t\t\tconst fromResult = this.schema.migratePersistedRecord(from, serializedSchema, 'down')\n\t\t\t\tif (fromResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(fromResult.reason)\n\t\t\t\t}\n\t\t\t\tconst toResult = this.schema.migratePersistedRecord(to, serializedSchema, 'down')\n\t\t\t\tif (toResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(toResult.reason)\n\t\t\t\t}\n\t\t\t\tconst patch = diffRecord(fromResult.value, toResult.value)\n\t\t\t\tif (patch) {\n\t\t\t\t\tresult[id] = [RecordOpType.Patch, patch]\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Add: single record - migrate and put\n\t\t\t\tconst migrationResult = this.schema.migratePersistedRecord(put, serializedSchema, 'down')\n\t\t\t\tif (migrationResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(migrationResult.reason)\n\t\t\t\t}\n\t\t\t\tresult[id] = [RecordOpType.Put, migrationResult.value]\n\t\t\t}\n\t\t}\n\n\t\t// Deletes don't need migration\n\t\tfor (const id of diff.deletes) {\n\t\t\tresult[id] = [RecordOpType.Remove]\n\t\t}\n\n\t\treturn Result.ok(result)\n\t}\n\n\t/**\n\t * Process an incoming message from a client session. Handles connection requests,\n\t * data synchronization pushes, and ping/pong for connection health.\n\t *\n\t * @param sessionId - The ID of the session that sent the message\n\t * @param message - The client message to process\n\t * @example\n\t * ```ts\n\t * // Typically called by WebSocket message handlers\n\t * websocket.onMessage((data) => {\n\t *   const message = JSON.parse(data)\n\t *   room.handleMessage(sessionId, message)\n\t * })\n\t * ```\n\t */\n\tasync handleMessage(sessionId: string, message: TLSocketClientSentEvent<R>) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Received message from unknown session')\n\t\t\treturn\n\t\t}\n\t\ttry {\n\t\t\tswitch (message.type) {\n\t\t\t\tcase 'connect': {\n\t\t\t\t\treturn this.handleConnectRequest(session, message)\n\t\t\t\t}\n\t\t\t\tcase 'push': {\n\t\t\t\t\treturn this.handlePushRequest(session, message)\n\t\t\t\t}\n\t\t\t\tcase 'ping': {\n\t\t\t\t\tif (session.state === RoomSessionState.Connected) {\n\t\t\t\t\t\tsession.lastInteractionTime = Date.now()\n\t\t\t\t\t}\n\t\t\t\t\treturn this._unsafe_sendMessage(session.sessionId, { type: 'pong' })\n\t\t\t\t}\n\t\t\t\tdefault: {\n\t\t\t\t\texhaustiveSwitchError(message)\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (e) {\n\t\t\tif (e instanceof TLSyncError) {\n\t\t\t\tthis.rejectSession(session.sessionId, e.reason)\n\t\t\t} else {\n\t\t\t\t// log error and reboot the room?\n\t\t\t\tthrow e\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Reject and disconnect a session due to incompatibility or other fatal errors.\n\t * Sends appropriate error messages before closing the connection.\n\t *\n\t * @param sessionId - The session to reject\n\t * @param fatalReason - The reason for rejection (optional)\n\t * @example\n\t * ```ts\n\t * // Reject due to version mismatch\n\t * room.rejectSession('user-123', TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t *\n\t * // Reject due to permission issue\n\t * room.rejectSession('user-456', 'Insufficient permissions')\n\t * ```\n\t */\n\trejectSession(sessionId: string, fatalReason?: TLSyncErrorCloseEventReason | string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) return\n\t\tif (!fatalReason) {\n\t\t\tthis.removeSession(sessionId)\n\t\t\treturn\n\t\t}\n\t\tif (session.requiresLegacyRejection) {\n\t\t\ttry {\n\t\t\t\tif (session.socket.isOpen) {\n\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\tlet legacyReason: TLIncompatibilityReason\n\t\t\t\t\tswitch (fatalReason) {\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.CLIENT_TOO_OLD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.ClientTooOld\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.SERVER_TOO_OLD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.ServerTooOld\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.INVALID_RECORD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.InvalidRecord\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tdefault:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.InvalidOperation\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t}\n\t\t\t\t\tsession.socket.sendMessage({\n\t\t\t\t\t\ttype: 'incompatibility_error',\n\t\t\t\t\t\treason: legacyReason,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t} catch {\n\t\t\t\t// noop\n\t\t\t} finally {\n\t\t\t\tthis.removeSession(sessionId)\n\t\t\t}\n\t\t} else {\n\t\t\tthis.removeSession(sessionId, fatalReason)\n\t\t}\n\t}\n\n\tprivate forceAllReconnect() {\n\t\tfor (const session of this.sessions.values()) {\n\t\t\tthis.removeSession(session.sessionId)\n\t\t}\n\t}\n\n\tprivate broadcastChanges(txn: TLSyncStorageTransaction<R>) {\n\t\tconst changes = txn.getChangesSince(this.lastDocumentClock)\n\t\tif (!changes) return\n\t\tconst { wipeAll, diff } = changes\n\t\tthis.lastDocumentClock = txn.getClock()\n\t\tif (wipeAll) {\n\t\t\t// If this happens it means we'd need to broadcast a wipe_all message to all clients,\n\t\t\t// which is not part of the protocol yet, so we need to force all clients to reconnect instead.\n\t\t\tthis.forceAllReconnect()\n\t\t\treturn\n\t\t}\n\t\tthis.broadcastPatch(diff)\n\t}\n\n\t/**\n\t * Work out whether a client we can't reconcile schemas with is running a newer or older SDK\n\t * than us.\n\t */\n\tprivate getVersionMismatchReason(theirSchema: SerializedSchema) {\n\t\tconst ourSchema = this.serializedSchema\n\n\t\tif (theirSchema.schemaVersion > ourSchema.schemaVersion) {\n\t\t\treturn TLSyncErrorCloseEventReason.SERVER_TOO_OLD\n\t\t}\n\n\t\tif (theirSchema.schemaVersion === 2 && ourSchema.schemaVersion === 2) {\n\t\t\tfor (const [sequenceId, theirVersion] of Object.entries(theirSchema.sequences)) {\n\t\t\t\tconst ourVersion = ourSchema.sequences[sequenceId]\n\t\t\t\tif (ourVersion === undefined || theirVersion > ourVersion) {\n\t\t\t\t\treturn TLSyncErrorCloseEventReason.SERVER_TOO_OLD\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn TLSyncErrorCloseEventReason.CLIENT_TOO_OLD\n\t}\n\n\tprivate handleConnectRequest(\n\t\tsession: RoomSession<R, SessionMeta>,\n\t\tmessage: Extract<TLSocketClientSentEvent<R>, { type: 'connect' }>\n\t) {\n\t\t// if the protocol versions don't match, disconnect the client\n\t\t// we will eventually want to try to make our protocol backwards compatible to some degree\n\t\t// and have a MIN_PROTOCOL_VERSION constant that the TLSyncRoom implements support for\n\t\tlet theirProtocolVersion = message.protocolVersion\n\t\t// 5 is the same as 6\n\t\tif (theirProtocolVersion === 5) {\n\t\t\ttheirProtocolVersion = 6\n\t\t}\n\t\t// 6 is almost the same as 7\n\t\tsession.requiresLegacyRejection = theirProtocolVersion === 6\n\t\tif (theirProtocolVersion === 6) {\n\t\t\ttheirProtocolVersion++\n\t\t}\n\t\tif (theirProtocolVersion === 7) {\n\t\t\ttheirProtocolVersion++\n\t\t\tsession.supportsStringAppend = false\n\t\t}\n\n\t\tif (theirProtocolVersion == null || theirProtocolVersion < getTlsyncProtocolVersion()) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t} else if (theirProtocolVersion > getTlsyncProtocolVersion()) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.SERVER_TOO_OLD)\n\t\t\treturn\n\t\t}\n\t\t// If the client's store is at a different version to ours, it could cause corruption.\n\t\t// We should disconnect the client and ask them to refresh.\n\t\tif (message.schema == null) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t}\n\t\tconst migrations = this.schema.getMigrationsSince(message.schema)\n\t\tif (!migrations.ok) {\n\t\t\tthis.rejectSession(session.sessionId, this.getVersionMismatchReason(message.schema))\n\t\t\treturn\n\t\t}\n\t\t// The client's schema is older than ours, but we can't migrate our data down to their\n\t\t// version (a migration isn't record-scoped or has no down migration), so they're too old.\n\t\tif (migrations.value.some((m) => m.scope !== 'record' || !m.down)) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t}\n\n\t\tconst sessionSchema = isEqual(message.schema, this.serializedSchema)\n\t\t\t? this.serializedSchema\n\t\t\t: message.schema\n\n\t\tconst requiresDownMigrations = migrations.value.length > 0\n\n\t\tconst connect = async (msg: Extract<TLSocketServerSentEvent<R>, { type: 'connect' }>) => {\n\t\t\tthis.sessions.set(session.sessionId, {\n\t\t\t\tstate: RoomSessionState.Connected,\n\t\t\t\tsessionId: session.sessionId,\n\t\t\t\tpresenceId: session.presenceId,\n\t\t\t\tsocket: session.socket,\n\t\t\t\tserializedSchema: sessionSchema,\n\t\t\t\trequiresDownMigrations,\n\t\t\t\tlastInteractionTime: Date.now(),\n\t\t\t\tdebounceTimer: null,\n\t\t\t\toutstandingDataMessages: [],\n\t\t\t\tsupportsStringAppend: session.supportsStringAppend,\n\t\t\t\tmeta: session.meta,\n\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\tobjectAccess: session.objectAccess,\n\t\t\t\trequiresLegacyRejection: session.requiresLegacyRejection,\n\t\t\t})\n\t\t\tthis._unsafe_sendMessage(session.sessionId, msg)\n\t\t}\n\n\t\tconst { documentClock, result } = this.storage.transaction((txn) => {\n\t\t\tthis.broadcastChanges(txn)\n\t\t\tconst docChanges = txn.getChangesSince(message.lastServerClock)\n\t\t\tconst presenceDiff = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsessionSchema,\n\t\t\t\trequiresDownMigrations,\n\t\t\t\t{\n\t\t\t\t\t// Exclude the connecting session's own presence \u2014 it will push fresh\n\t\t\t\t\t// data immediately after connecting. Sending the stale record back\n\t\t\t\t\t// would leave an orphaned presence in the client's local store (the\n\t\t\t\t\t// server never echoes a session's own updates back to it).\n\t\t\t\t\tputs: Object.fromEntries(\n\t\t\t\t\t\t[...this.presenceStore.values()]\n\t\t\t\t\t\t\t.filter((p) => p.id !== session.presenceId)\n\t\t\t\t\t\t\t.map((p) => [p.id, p])\n\t\t\t\t\t),\n\t\t\t\t\tdeletes: [],\n\t\t\t\t}\n\t\t\t)\n\t\t\tif (!presenceDiff.ok) return null\n\n\t\t\t// Migrate the diff if needed, or use the pre-computed network diff\n\t\t\tlet docDiff: NetworkDiff<R> | null = null\n\t\t\tif (docChanges && sessionSchema !== this.serializedSchema) {\n\t\t\t\tconst migrated = this.migrateDiffOrRejectSession(\n\t\t\t\t\tsession.sessionId,\n\t\t\t\t\tsessionSchema,\n\t\t\t\t\trequiresDownMigrations,\n\t\t\t\t\tdocChanges.diff\n\t\t\t\t)\n\t\t\t\tif (!migrated.ok) return null\n\t\t\t\tdocDiff = migrated.value\n\t\t\t} else if (docChanges) {\n\t\t\t\tdocDiff = toNetworkDiff(docChanges.diff)\n\t\t\t}\n\t\t\treturn {\n\t\t\t\ttype: 'connect',\n\t\t\t\tconnectRequestId: message.connectRequestId,\n\t\t\t\thydrationType: docChanges?.wipeAll ? 'wipe_all' : 'wipe_presence',\n\t\t\t\tprotocolVersion: getTlsyncProtocolVersion(),\n\t\t\t\tschema: this.schema.serialize(),\n\t\t\t\tserverClock: txn.getClock(),\n\t\t\t\tdiff: { ...presenceDiff.value, ...docDiff },\n\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\tobjectAccess: session.objectAccess,\n\t\t\t} satisfies Extract<TLSocketServerSentEvent<R>, { type: 'connect' }>\n\t\t}) // no id needed because this only reads, no writes.\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tif (result) {\n\t\t\tconnect(result)\n\t\t}\n\t}\n\n\tprivate handlePushRequest(\n\t\tsession: RoomSession<R, SessionMeta> | null,\n\t\tmessage: Extract<TLSocketClientSentEvent<R>, { type: 'push' }>\n\t) {\n\t\t// We must be connected to handle push requests\n\t\tif (session && session.state !== RoomSessionState.Connected) {\n\t\t\treturn\n\t\t}\n\t\t// update the last interaction time\n\t\tif (session) {\n\t\t\tsession.lastInteractionTime = Date.now()\n\t\t}\n\n\t\tconst legacyAppendMode = !this.getCanEmitStringAppend()\n\n\t\tinterface ActualChanges {\n\t\t\tdiffs: {\n\t\t\t\tnetworkDiff: NetworkDiff<R>\n\t\t\t\tdiff: TLSyncForwardDiff<R>\n\t\t\t} | null\n\t\t}\n\n\t\tconst propagateOp = (\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\top: RecordOp<R>,\n\t\t\tbefore: R | undefined,\n\t\t\tafter: R | undefined\n\t\t) => {\n\t\t\tif (!changes.diffs) changes.diffs = { networkDiff: {}, diff: { puts: {}, deletes: [] } }\n\t\t\tchanges.diffs.networkDiff[id] = op\n\t\t\tswitch (op[0]) {\n\t\t\t\tcase RecordOpType.Put:\n\t\t\t\t\tchanges.diffs.diff.puts[id] = op[1]\n\t\t\t\t\tbreak\n\t\t\t\tcase RecordOpType.Patch:\n\t\t\t\t\tassert(before && after, 'before and after are required for patches')\n\t\t\t\t\tchanges.diffs.diff.puts[id] = [before, after]\n\t\t\t\t\tbreak\n\t\t\t\tcase RecordOpType.Remove:\n\t\t\t\t\tchanges.diffs.diff.deletes.push(id)\n\t\t\t\t\tbreak\n\t\t\t\tdefault:\n\t\t\t\t\texhaustiveSwitchError(op[0])\n\t\t\t}\n\t\t}\n\n\t\tconst addDocument = (\n\t\t\tstorage: MinimalDocStore<R>,\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\t_state: R,\n\t\t\tauthorize?: (prev: R | null, next: R) => R | null\n\t\t): Result<void, void> => {\n\t\t\tconst res = session\n\t\t\t\t? this.schema.migratePersistedRecord(_state, session.serializedSchema, 'up')\n\t\t\t\t: { type: 'success' as const, value: _state }\n\t\t\tif (res.type === 'error') {\n\t\t\t\tthrow new TLSyncError(res.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t}\n\t\t\tlet { value: state } = res\n\n\t\t\t// Get the existing document, if any\n\t\t\tconst doc = storage.get(id) as R | undefined\n\n\t\t\t// Authorize on the up-migrated record; on create the authorizer's return is stored as-is,\n\t\t\t// so no later migration can clobber stamped fields.\n\t\t\tif (authorize) {\n\t\t\t\tconst result = authorize(doc ?? null, state)\n\t\t\t\tif (!result) return Result.ok(undefined) // vetoed: skip the op, the client self-corrects\n\t\t\t\tif (!doc) state = result // create: store the authorizer's (stamped) record\n\t\t\t}\n\n\t\t\tif (doc) {\n\t\t\t\t// If there's an existing document, replace it with the new state\n\t\t\t\t// but propagate a diff rather than the entire value\n\t\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, doc.typeName))\n\t\t\t\tconst diff = diffAndValidateRecord(doc, state, recordType)\n\t\t\t\tif (diff) {\n\t\t\t\t\tstorage.set(id, state)\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff], doc, state)\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Otherwise, if we don't already have a document with this id\n\t\t\t\t// create the document and propagate the put op\n\t\t\t\t// set automatically clears tombstones if they exist\n\t\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, state.typeName))\n\t\t\t\tvalidateRecord(state, recordType)\n\t\t\t\tstorage.set(id, state)\n\t\t\t\tpropagateOp(changes, id, [RecordOpType.Put, state], undefined, undefined)\n\t\t\t}\n\n\t\t\treturn Result.ok(undefined)\n\t\t}\n\n\t\tconst patchDocument = (\n\t\t\tstorage: MinimalDocStore<R>,\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\tpatch: ObjectDiff,\n\t\t\tauthorize?: (prev: R, next: R) => R | null\n\t\t) => {\n\t\t\t// if it was already deleted, there's no need to apply the patch\n\t\t\tconst doc = storage.get(id) as R | undefined\n\t\t\tif (!doc) return\n\n\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, doc.typeName))\n\t\t\t// If the client's version of the record is older than ours,\n\t\t\t// we apply the patch to the downgraded version of the record\n\t\t\tconst downgraded = session\n\t\t\t\t? this.schema.migratePersistedRecord(doc, session.serializedSchema, 'down')\n\t\t\t\t: { type: 'success' as const, value: doc }\n\t\t\tif (downgraded.type === 'error') {\n\t\t\t\tthrow new TLSyncError(downgraded.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t}\n\n\t\t\tif (downgraded.value === doc) {\n\t\t\t\t// If the versions are compatible, apply the patch and propagate the patch op\n\t\t\t\tconst diff = applyAndDiffRecord(doc, patch, recordType, legacyAppendMode)\n\t\t\t\tif (diff) {\n\t\t\t\t\t// Authorize on the committed candidate \u2014 the record that will actually be stored.\n\t\t\t\t\tif (authorize && !authorize(doc, diff[1])) return\n\t\t\t\t\tstorage.set(id, diff[1])\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff[0]], doc, diff[1])\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// need to apply the patch to the downgraded version and then upgrade it\n\n\t\t\t\t// apply the patch to the downgraded version\n\t\t\t\tconst patched = applyObjectDiff(downgraded.value, patch)\n\t\t\t\t// then upgrade the patched version and use that as the new state\n\t\t\t\tconst upgraded = session\n\t\t\t\t\t? this.schema.migratePersistedRecord(patched, session.serializedSchema, 'up')\n\t\t\t\t\t: { type: 'success' as const, value: patched }\n\t\t\t\t// If the client's version is too old, we'll hit an error\n\t\t\t\tif (upgraded.type === 'error') {\n\t\t\t\t\tthrow new TLSyncError(upgraded.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t}\n\t\t\t\t// replace the state with the upgraded version and propagate the patch op\n\t\t\t\tconst diff = diffAndValidateRecord(doc, upgraded.value, recordType, legacyAppendMode)\n\t\t\t\tif (diff) {\n\t\t\t\t\t// Authorize on the committed candidate \u2014 the upgraded record, not a raw preview.\n\t\t\t\t\tif (authorize && !authorize(doc, upgraded.value)) return\n\t\t\t\t\tstorage.set(id, upgraded.value)\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff], doc, upgraded.value)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst { result, documentClock, changes } = this.storage.transaction(\n\t\t\t(txn) => {\n\t\t\t\tthis.broadcastChanges(txn)\n\t\t\t\t// collect actual ops that resulted from the push\n\t\t\t\t// these will be broadcast to other users\n\n\t\t\t\tconst docChanges: ActualChanges = { diffs: null }\n\t\t\t\tconst presenceChanges: ActualChanges = { diffs: null }\n\n\t\t\t\tif (this.presenceType && session?.presenceId && 'presence' in message && message.presence) {\n\t\t\t\t\tif (!session) throw new Error('session is required for presence pushes')\n\t\t\t\t\t// The push request was for the presence scope.\n\t\t\t\t\tconst id = session.presenceId\n\t\t\t\t\tconst [type, val] = message.presence\n\t\t\t\t\tconst { typeName } = this.presenceType\n\t\t\t\t\tswitch (type) {\n\t\t\t\t\t\tcase RecordOpType.Put: {\n\t\t\t\t\t\t\t// Try to put the document. If it fails, stop here.\n\t\t\t\t\t\t\taddDocument(this.presenceStore, presenceChanges, id, {\n\t\t\t\t\t\t\t\t...val,\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\ttypeName,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t}\n\t\t\t\t\t\tcase RecordOpType.Patch: {\n\t\t\t\t\t\t\t// Try to patch the document. If it fails, stop here.\n\t\t\t\t\t\t\tpatchDocument(this.presenceStore, presenceChanges, id, {\n\t\t\t\t\t\t\t\t...val,\n\t\t\t\t\t\t\t\tid: [ValueOpType.Put, id],\n\t\t\t\t\t\t\t\ttypeName: [ValueOpType.Put, typeName],\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\t// Per-op write gate: document-lane records are gated by `isReadonly`, object-lane\n\t\t\t\t// records by `objectAccess`. Denied ops are skipped (the client is corrected by the\n\t\t\t\t// resulting discard/rebase push_result, exactly as whole-diff readonly skips were).\n\t\t\t\t// Server-initiated pushes (no session) are always allowed.\n\t\t\t\tconst canWrite = (typeName: string) =>\n\t\t\t\t\t!session ||\n\t\t\t\t\t(this.objectTypes.has(typeName) ? session.objectAccess !== 'read' : !session.isReadonly)\n\n\t\t\t\tif (message.diff) {\n\t\t\t\t\t// The push request was for the document scope.\n\t\t\t\t\tfor (const [id, op] of objectMapEntriesIterable(message.diff!)) {\n\t\t\t\t\t\tswitch (op[0]) {\n\t\t\t\t\t\t\tcase RecordOpType.Put: {\n\t\t\t\t\t\t\t\t// The write gate is checked before type validation so that a denied\n\t\t\t\t\t\t\t\t// session's ops are skipped without rejection, matching the previous\n\t\t\t\t\t\t\t\t// whole-diff readonly behavior.\n\t\t\t\t\t\t\t\tif (!canWrite(op[1].typeName)) continue\n\t\t\t\t\t\t\t\t// Try to add the document.\n\t\t\t\t\t\t\t\t// If we're putting a record with a type that we don't recognize, fail\n\t\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\t\t!this.documentTypes.has(op[1].typeName) &&\n\t\t\t\t\t\t\t\t\t!this.objectTypes.has(op[1].typeName)\n\t\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\t\tthrow new TLSyncError(\n\t\t\t\t\t\t\t\t\t\t'invalid record',\n\t\t\t\t\t\t\t\t\t\tTLSyncErrorCloseEventReason.INVALID_RECORD\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tconst record = op[1]\n\t\t\t\t\t\t\t\t// A put must not change the record's typeName. Two reasons, and the first\n\t\t\t\t\t\t\t\t// applies whether or not authorizers are configured: the write gate above\n\t\t\t\t\t\t\t\t// keyed off the *incoming* typeName, so a swap between lanes (document <->\n\t\t\t\t\t\t\t\t// object) would let a session denied on one lane write through the other by\n\t\t\t\t\t\t\t\t// relabeling an existing record. The second is that the authorizer lookup\n\t\t\t\t\t\t\t\t// also keys off the incoming typeName while the replace path validates\n\t\t\t\t\t\t\t\t// against the stored one, so a swap would consult the wrong authorizer (or\n\t\t\t\t\t\t\t\t// none). Skip it like a veto; the client self-corrects.\n\t\t\t\t\t\t\t\tconst prevRecord = session ? ((txn.get(id) as R | undefined) ?? null) : null\n\t\t\t\t\t\t\t\tif (session && prevRecord && prevRecord.typeName !== record.typeName) {\n\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t'skipping put that changes typeName',\n\t\t\t\t\t\t\t\t\t\t`${prevRecord.typeName} -> ${record.typeName}`,\n\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t// Per-type authorizer: stamp/veto the write from the session's identity.\n\t\t\t\t\t\t\t\t// Client pushes only; runs inside `addDocument`, on the up-migrated record.\n\t\t\t\t\t\t\t\tlet authorize: ((prev: R | null, next: R) => R | null) | undefined\n\t\t\t\t\t\t\t\tif (session && this.authorizeRecord) {\n\t\t\t\t\t\t\t\t\tconst authorizePut = this.authorizerFor(record.typeName)\n\t\t\t\t\t\t\t\t\tif (authorizePut) {\n\t\t\t\t\t\t\t\t\t\tauthorize = (prevRec, next) => {\n\t\t\t\t\t\t\t\t\t\t\tconst result = authorizePut(\n\t\t\t\t\t\t\t\t\t\t\t\tprevRec\n\t\t\t\t\t\t\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsession: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsessionId: session.sessionId,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tmeta: session.meta,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: 'update',\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tprev: prevRec,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsession: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsessionId: session.sessionId,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tmeta: session.meta,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: 'create',\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tprev: null,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\tif (!result) {\n\t\t\t\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t\t\t\t'authorizer vetoed put',\n\t\t\t\t\t\t\t\t\t\t\t\t\trecord.typeName,\n\t\t\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\t\treturn null\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t// create: store the stamped record; update: allow/veto only\n\t\t\t\t\t\t\t\t\t\t\treturn prevRec ? next : result\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\taddDocument(txn, docChanges, id, record, authorize)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcase RecordOpType.Patch: {\n\t\t\t\t\t\t\t\tconst doc = txn.get(id) as R | undefined\n\t\t\t\t\t\t\t\t// if it was already deleted, there's no need to apply the patch\n\t\t\t\t\t\t\t\tif (!doc) continue\n\t\t\t\t\t\t\t\tif (!canWrite(doc.typeName)) continue\n\t\t\t\t\t\t\t\t// Per-type authorizer (update, allow/veto only): runs inside `patchDocument`\n\t\t\t\t\t\t\t\t// on the committed candidate, never on a raw client-version preview.\n\t\t\t\t\t\t\t\tconst authorizePatch = session && this.authorizerFor(doc.typeName)\n\t\t\t\t\t\t\t\tconst authorize = authorizePatch\n\t\t\t\t\t\t\t\t\t? (prev: R, next: R) => {\n\t\t\t\t\t\t\t\t\t\t\tconst result = authorizePatch({\n\t\t\t\t\t\t\t\t\t\t\t\tsession: {\n\t\t\t\t\t\t\t\t\t\t\t\t\tsessionId: session.sessionId,\n\t\t\t\t\t\t\t\t\t\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\t\t\t\t\t\t\t\t\t\tmeta: session.meta,\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\ttype: 'update',\n\t\t\t\t\t\t\t\t\t\t\t\tprev,\n\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t\t\t\tif (!result) {\n\t\t\t\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t\t\t\t'authorizer vetoed patch',\n\t\t\t\t\t\t\t\t\t\t\t\t\tdoc.typeName,\n\t\t\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\treturn result\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t: undefined\n\t\t\t\t\t\t\t\t// Try to patch the document. If it fails, stop here.\n\t\t\t\t\t\t\t\tpatchDocument(txn, docChanges, id, op[1], authorize)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcase RecordOpType.Remove: {\n\t\t\t\t\t\t\t\tconst doc = txn.get(id) as R | undefined\n\t\t\t\t\t\t\t\tif (!doc) {\n\t\t\t\t\t\t\t\t\t// If the doc was already deleted, don't do anything, no need to propagate a delete op\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tif (!canWrite(doc.typeName)) continue\n\t\t\t\t\t\t\t\t// Per-type authorizer (delete): veto deletes the session isn't allowed to make,\n\t\t\t\t\t\t\t\t// e.g. deleting someone else's comment. Allow/veto only.\n\t\t\t\t\t\t\t\tconst authorizeRemove = session && this.authorizerFor(doc.typeName)\n\t\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\t\tauthorizeRemove &&\n\t\t\t\t\t\t\t\t\t!authorizeRemove({\n\t\t\t\t\t\t\t\t\t\tsession: {\n\t\t\t\t\t\t\t\t\t\t\tsessionId: session.sessionId,\n\t\t\t\t\t\t\t\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\t\t\t\t\t\t\t\tmeta: session.meta,\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\ttype: 'delete',\n\t\t\t\t\t\t\t\t\t\tprev: doc,\n\t\t\t\t\t\t\t\t\t\tnext: null,\n\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t'authorizer vetoed delete',\n\t\t\t\t\t\t\t\t\t\tdoc.typeName,\n\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t\t// Delete the document and propagate the delete op\n\t\t\t\t\t\t\t\t// delete automatically creates tombstones\n\t\t\t\t\t\t\t\ttxn.delete(id)\n\t\t\t\t\t\t\t\tpropagateOp(docChanges, id, op, doc, undefined)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\treturn { docChanges, presenceChanges }\n\t\t\t},\n\t\t\t{ id: this.internalTxnId, emitChanges: 'when-different' }\n\t\t)\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tlet pushResult: TLSocketServerSentEvent<R> | undefined\n\t\tif (changes && session) {\n\t\t\t// txn did not apply verbatim so we should broadcast the actual changes\n\t\t\tresult.docChanges.diffs = { networkDiff: toNetworkDiff(changes) ?? {}, diff: changes }\n\t\t}\n\n\t\tif (isEqual(result.docChanges.diffs?.networkDiff, message.diff)) {\n\t\t\tpushResult = {\n\t\t\t\ttype: 'push_result',\n\t\t\t\tclientClock: message.clientClock,\n\t\t\t\tserverClock: documentClock,\n\t\t\t\taction: 'commit',\n\t\t\t}\n\t\t} else if (!result.docChanges.diffs?.networkDiff) {\n\t\t\tpushResult = {\n\t\t\t\ttype: 'push_result',\n\t\t\t\tclientClock: message.clientClock,\n\t\t\t\tserverClock: documentClock,\n\t\t\t\taction: 'discard',\n\t\t\t}\n\t\t} else if (session) {\n\t\t\t// if recordsDiff is null but diff is not, then there are no clients that need down migrations\n\t\t\t// so we can just use the diff directly\n\t\t\tconst diff = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsession.serializedSchema,\n\t\t\t\tsession.requiresDownMigrations,\n\t\t\t\tresult.docChanges.diffs.diff,\n\t\t\t\tresult.docChanges.diffs.networkDiff\n\t\t\t)\n\t\t\tif (diff.ok) {\n\t\t\t\tpushResult = {\n\t\t\t\t\ttype: 'push_result',\n\t\t\t\t\tclientClock: message.clientClock,\n\t\t\t\t\tserverClock: documentClock,\n\t\t\t\t\taction: { rebaseWithDiff: diff.value },\n\t\t\t\t}\n\t\t\t}\n\t\t\t// if the difff was not ok then the session was rejected and it's ok to continue without a push result\n\t\t}\n\n\t\tif (session && pushResult) {\n\t\t\tthis._unsafe_sendMessage(session.sessionId, pushResult)\n\t\t}\n\t\tif (result.docChanges.diffs || result.presenceChanges.diffs) {\n\t\t\tthis.broadcastPatch(\n\t\t\t\t{\n\t\t\t\t\tputs: {\n\t\t\t\t\t\t...result.docChanges.diffs?.diff.puts,\n\t\t\t\t\t\t...result.presenceChanges.diffs?.diff.puts,\n\t\t\t\t\t},\n\t\t\t\t\tdeletes: [\n\t\t\t\t\t\t...(result.docChanges.diffs?.diff.deletes ?? []),\n\t\t\t\t\t\t...(result.presenceChanges.diffs?.diff.deletes ?? []),\n\t\t\t\t\t],\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\t...result.docChanges.diffs?.networkDiff,\n\t\t\t\t\t...result.presenceChanges.diffs?.networkDiff,\n\t\t\t\t},\n\t\t\t\tsession?.sessionId\n\t\t\t)\n\t\t}\n\n\t\tif (result.presenceChanges.diffs) {\n\t\t\tqueueMicrotask(() => {\n\t\t\t\tthis.onPresenceChange?.()\n\t\t\t})\n\t\t}\n\n\t\tif (result.docChanges.diffs && this.onCommittedChanges) {\n\t\t\tconst diff = result.docChanges.diffs.diff\n\t\t\tqueueMicrotask(() => {\n\t\t\t\ttry {\n\t\t\t\t\tthis.onCommittedChanges?.({ diff, documentClock })\n\t\t\t\t} catch (e) {\n\t\t\t\t\tthis.log?.error?.('onCommittedChanges threw', e)\n\t\t\t\t}\n\t\t\t})\n\t\t}\n\t}\n\n\t/**\n\t * Handle the event when a client disconnects. Cleans up the session and\n\t * removes any presence information.\n\t *\n\t * @param sessionId - The session that disconnected\n\t * @example\n\t * ```ts\n\t * websocket.onClose(() => {\n\t *   room.handleClose(sessionId)\n\t * })\n\t * ```\n\t */\n\thandleClose(sessionId: string) {\n\t\tthis.cancelSession(sessionId)\n\t}\n}\n\n/** @internal */\nexport interface MinimalDocStore<R extends UnknownRecord> {\n\tget(id: string): UnknownRecord | undefined\n\tset(id: string, record: R): void\n\tdelete(id: string): void\n}\n\n/** @internal */\nexport class PresenceStore<R extends UnknownRecord> implements MinimalDocStore<R> {\n\tprivate readonly presences = new AtomMap<string, R>('presences')\n\n\tget(id: string): UnknownRecord | undefined {\n\t\treturn this.presences.get(id)\n\t}\n\n\tset(id: string, state: R): void {\n\t\tthis.presences.set(id, state)\n\t}\n\n\tdelete(id: string): void {\n\t\tthis.presences.delete(id)\n\t}\n\n\tvalues() {\n\t\treturn this.presences.values()\n\t}\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAOO;AACP,mBAUO;AACP,wBAAiC;AACjC,kBAQO;AACP,sBAAyB;AACzB,sBAOO;AACP,wBAA0E;AAC1E,yBAMO;AAEP,0BAAoF;AACpF,2BAKO;AAiCA,MAAM,iCAAiC,MAAO;AAErD,MAAM,YAAY,CAAC,SAAiB,KAAK,IAAI,IAAI;AA2H1C,MAAM,WAAiD;AAAA;AAAA,EAEpD,WAAW,oBAAI,IAAyC;AAAA,EAEzD,oBAAoB;AAAA,EAEpB,aAAmD;AAAA,EAE3D,oBAAgB,uBAAS,MAAM;AAC9B,QAAI,KAAK,YAAY;AACpB,mBAAa,KAAK,UAAU;AAC5B,WAAK,aAAa;AAAA,IACnB;AACA,eAAW,UAAU,KAAK,SAAS,OAAO,GAAG;AAC5C,cAAQ,OAAO,OAAO;AAAA,QACrB,KAAK,oCAAiB,WAAW;AAChC,gBAAM,cAAc,UAAU,OAAO,mBAAmB,IAAI,KAAK;AACjE,cAAI,eAAe,CAAC,OAAO,OAAO,QAAQ;AACzC,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC;AACA;AAAA,QACD;AAAA,QACA,KAAK,oCAAiB,wBAAwB;AAC7C,gBAAM,cAAc,UAAU,OAAO,gBAAgB,IAAI;AACzD,cAAI,eAAe,CAAC,OAAO,OAAO,QAAQ;AAEzC,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC,OAAO;AACN,iBAAK,sBAAsB;AAAA,UAC5B;AACA;AAAA,QACD;AAAA,QACA,KAAK,oCAAiB,iBAAiB;AACtC,gBAAM,cAAc,UAAU,OAAO,gBAAgB,IAAI;AACzD,cAAI,aAAa;AAChB,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC,OAAO;AACN,iBAAK,sBAAsB;AAAA,UAC5B;AACA;AAAA,QACD;AAAA,QACA,SAAS;AACR,kDAAsB,MAAM;AAAA,QAC7B;AAAA,MACD;AAAA,IACD;AAAA,EACD,GAAG,GAAI;AAAA,EAEC,wBAAwB;AAC/B,QAAI,KAAK,WAAY;AACrB,SAAK,aAAa,WAAW,KAAK,eAAe,+CAA4B,GAAG;AAAA,EACjF;AAAA,EAES,gBAAgB,IAAI,cAAiB;AAAA,EAEtC,cAAiC,CAAC;AAAA,EAElC,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,QAAQ;AACP,SAAK,YAAY,QAAQ,CAAC,MAAM,EAAE,CAAC;AACnC,SAAK,SAAS,QAAQ,CAAC,YAAY;AAClC,cAAQ,OAAO,MAAM;AAAA,IACtB,CAAC;AACD,SAAK,YAAY;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW;AACV,WAAO,KAAK;AAAA,EACb;AAAA,EAES,aAAS,oCAGf;AAAA;AAAA,EAGc;AAAA,EAER;AAAA,EAEA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EACA;AAAA,EACD;AAAA,EACQ;AAAA,EAGC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQT,cAAc,UAAyE;AAC9F,UAAM,YAAY,KAAK,kBAAkB,QAAQ;AAGjD,QAAI,CAAC,UAAW,QAAO;AAIvB,WAAO,CAAC,SAAS;AAChB,UAAI;AACH,eAAO,UAAU,IAAI;AAAA,MACtB,SAAS,GAAG;AACX,aAAK,KAAK,QAAQ,gDAAgD,CAAC;AACnE,eAAO;AAAA,MACR;AAAA,IACD;AAAA,EACD;AAAA,EAEA,YAAY,MAwBT;AACF,SAAK,SAAS,KAAK;AACnB,SAAK,MAAM,KAAK;AAChB,SAAK,mBAAmB,KAAK;AAC7B,SAAK,qBAAqB,KAAK;AAC/B,SAAK,kBAAkB,KAAK;AAC5B,SAAK,UAAU,KAAK;AACpB,SAAK,qBAAqB,KAAK,iBAAiB;AAEhD;AAAA,MACC;AAAA,MACA;AAAA,IAED;AAGA,SAAK,mBAAmB,KAAK,MAAM,KAAK,UAAU,KAAK,OAAO,UAAU,CAAC,CAAC;AAE1E,SAAK,cAAc,IAAI,IAAI,KAAK,eAAe,CAAC,CAAC;AACjD,eAAW,YAAY,KAAK,aAAa;AACxC,YAAM,WAAO,6BAAe,KAAK,OAAO,OAAO,QAAQ;AACvD,+BAAO,MAAM,4BAA4B,QAAQ,mCAAmC;AACpF;AAAA,QACC,KAAK,UAAU;AAAA,QACf,4BAA4B,QAAQ,sCAAsC,KAAK,KAAK;AAAA,MACrF;AAAA,IACD;AAGA,SAAK,gBAAgB,IAAI;AAAA,MACxB,OAAO,OAA2B,KAAK,OAAO,KAAK,EACjD,OAAO,CAAC,MAAM,EAAE,UAAU,cAAc,CAAC,KAAK,YAAY,IAAI,EAAE,QAAQ,CAAC,EACzE,IAAI,CAAC,MAAM,EAAE,QAAQ;AAAA,IACxB;AAEA,UAAM,gBAAgB,IAAI;AAAA,MACzB,OAAO,OAA2B,KAAK,OAAO,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,UAAU;AAAA,IAC1F;AAEA,QAAI,cAAc,OAAO,GAAG;AAC3B,YAAM,IAAI;AAAA,QACT,wEAAwE,cAAc,IAAI;AAAA,MAC3F;AAAA,IACD;AAEA,SAAK,eAAe,cAAc,OAAO,EAAE,KAAK,GAAG,SAAS;AAI5D,QAAI,KAAK,gBAAgB,KAAK,iBAAiB;AAC9C;AAAA,QACC,KAAC,6BAAe,KAAK,iBAAiB,KAAK,aAAa,QAAQ;AAAA,QAChE,gCAAgC,KAAK,aAAa,QAAQ;AAAA,MAC3D;AAAA,IACD;AAEA,UAAM,EAAE,cAAc,IAAI,KAAK,QAAQ,YAAY,CAAC,QAAQ;AAC3D,WAAK,OAAO,eAAe,GAAG;AAAA,IAC/B,CAAC;AAED,SAAK,oBAAoB;AAEzB,SAAK,YAAY;AAAA,MAChB,KAAK,QAAQ,SAAS,CAAC,EAAE,GAAG,MAAM;AACjC,YAAI,OAAO,KAAK,eAAe;AAC9B,eAAK,gCAAgC;AAAA,QACtC;AAAA,MACD,CAAC;AAAA,IACF;AAEA,SAAK,YAAY,KAAK,MAAM;AAC3B,WAAK,cAAc,OAAO;AAC1B,UAAI,KAAK,YAAY;AACpB,qBAAa,KAAK,UAAU;AAC5B,aAAK,aAAa;AAAA,MACnB;AAAA,IACD,CAAC;AAOD,QAAI,OAAO,SAAS,KAAK,kBAAkB,KAAK,KAAK,qBAAqB,GAAG;AAC5E,YAAM,kBAAkB,KAAK,IAAI,KAAM,KAAK,MAAM,KAAK,qBAAqB,CAAC,CAAC;AAC9E,WAAK,YAAY,SAAK,0BAAS,MAAM,KAAK,cAAc,GAAG,eAAe,CAAC;AAAA,IAC5E;AAAA,EACD;AAAA,EACQ,kCAAkC;AACzC,SAAK,QAAQ,YAAY,CAAC,QAAQ;AACjC,WAAK,iBAAiB,GAAG;AACzB,WAAK,oBAAoB,IAAI,SAAS;AAAA,IACvC,CAAC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,oBACP,WACA,SACC;AACD,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,4CAA4C,QAAQ,IAAI;AACzE;AAAA,IACD;AACA,QAAI,QAAQ,UAAU,oCAAiB,WAAW;AACjD,WAAK,KAAK,OAAO,gDAAgD,QAAQ,IAAI;AAC7E;AAAA,IACD;AACA,QAAI,QAAQ,OAAO,QAAQ;AAC1B,UAAI,QAAQ,SAAS,WAAW,QAAQ,SAAS,eAAe;AAE/D,YAAI,QAAQ,SAAS,QAAQ;AAG5B,eAAK,mBAAmB,SAAS;AAAA,QAClC;AACA,gBAAQ,OAAO,YAAY,OAAO;AAAA,MACnC,OAAO;AACN,YAAI,QAAQ,kBAAkB,MAAM;AAEnC,kBAAQ,OAAO,YAAY,EAAE,MAAM,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;AAE5D,kBAAQ,gBAAgB;AAAA,YACvB,MAAM,KAAK,mBAAmB,SAAS;AAAA,YACvC;AAAA,UACD;AAAA,QACD,OAAO;AACN,kBAAQ,wBAAwB,KAAK,OAAO;AAAA,QAC7C;AAAA,MACD;AAAA,IACD,OAAO;AACN,WAAK,cAAc,QAAQ,SAAS;AAAA,IACrC;AAAA,EACD;AAAA;AAAA;AAAA,EAIA,mBAAmB,WAAmB;AACrC,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAE3C,QAAI,CAAC,WAAW,QAAQ,UAAU,oCAAiB,WAAW;AAC7D;AAAA,IACD;AAEA,YAAQ,gBAAgB;AAExB,QAAI,QAAQ,wBAAwB,SAAS,GAAG;AAG/C,YAAM,OAAO,QAAQ;AACrB,cAAQ,0BAA0B,CAAC;AACnC,cAAQ,OAAO,YAAY,EAAE,MAAM,QAAQ,KAAK,CAAC;AAAA,IAClD;AAAA,EACD;AAAA;AAAA,EAGQ,cAAc,WAAmB,aAAsB;AAC9D,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,iCAAiC;AAClD;AAAA,IACD;AAEA,SAAK,SAAS,OAAO,SAAS;AAE9B,QAAI;AACH,UAAI,aAAa;AAChB,gBAAQ,OAAO,MAAM,+CAA2B,WAAW;AAAA,MAC5D,OAAO;AACN,gBAAQ,OAAO,MAAM;AAAA,MACtB;AAAA,IACD,QAAQ;AAAA,IAER;AAEA,UAAM,WAAW,KAAK,cAAc,IAAI,QAAQ,cAAc,EAAE;AAChE,QAAI,UAAU;AACb,WAAK,cAAc,OAAO,QAAQ,UAAW;AAE7C,WAAK,eAAe;AAAA,QACnB,MAAM,CAAC;AAAA,QACP,SAAS,CAAC,QAAQ,UAAW;AAAA,MAC9B,CAAC;AAAA,IACF;AAEA,SAAK,OAAO,KAAK,mBAAmB,EAAE,WAAW,MAAM,QAAQ,KAAK,CAAC;AACrE,QAAI,KAAK,SAAS,SAAS,GAAG;AAC7B,WAAK,OAAO,KAAK,mBAAmB;AAAA,IACrC;AAAA,EACD;AAAA,EAEQ,cAAc,WAAmB;AACxC,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb;AAAA,IACD;AAEA,QAAI,QAAQ,UAAU,oCAAiB,iBAAiB;AACvD,WAAK,KAAK,OAAO,0DAA0D;AAC3E;AAAA,IACD;AAEA,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,oCAAiB;AAAA,MACxB;AAAA,MACA,YAAY,QAAQ;AAAA,MACpB,QAAQ,QAAQ;AAAA,MAChB,kBAAkB,KAAK,IAAI;AAAA,MAC3B,MAAM,QAAQ;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,yBAAyB,QAAQ;AAAA,MACjC,sBAAsB,QAAQ;AAAA,IAC/B,CAAC;AAED,QAAI;AACH,cAAQ,OAAO,MAAM;AAAA,IACtB,QAAQ;AAAA,IAER;AAEA,SAAK,sBAAsB;AAAA,EAC5B;AAAA,EAES,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUjB,eACP,MACA,aACA,iBACC;AAED,UAAM,aAAa,mBAAe,oCAAc,IAAI;AACpD,QAAI,CAAC,WAAY,QAAO;AAExB,SAAK,SAAS,QAAQ,CAAC,YAAY;AAClC,UAAI,QAAQ,UAAU,oCAAiB,UAAW;AAClD,UAAI,oBAAoB,QAAQ,UAAW;AAC3C,UAAI,CAAC,QAAQ,OAAO,QAAQ;AAC3B,aAAK,cAAc,QAAQ,SAAS;AACpC;AAAA,MACD;AAEA,YAAM,aAAa,KAAK;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR;AAAA,MACD;AACA,UAAI,CAAC,WAAW,GAAI;AAEpB,WAAK,oBAAoB,QAAQ,WAAW;AAAA,QAC3C,MAAM;AAAA,QACN,MAAM,WAAW;AAAA,QACjB,aAAa,KAAK;AAAA,MACnB,CAAC;AAAA,IACF,CAAC;AACD,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,kBAAkB,WAAmB,MAAiB;AACrD,SAAK,oBAAoB,WAAW,EAAE,MAAM,UAAU,KAAK,CAAC;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,iBAAiB,MAMd;AACF,UAAM,EAAE,WAAW,QAAQ,MAAM,YAAY,aAAa,IAAI;AAC9D,UAAM,WAAW,KAAK,SAAS,IAAI,SAAS;AAC5C,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,oCAAiB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,YAAY,UAAU,cAAc,KAAK,cAAc,SAAS,KAAK;AAAA,MACrE,kBAAkB,KAAK,IAAI;AAAA,MAC3B;AAAA,MACA,YAAY,cAAc;AAAA,MAC1B,cAAc,gBAAgB;AAAA;AAAA,MAE9B,yBAAyB;AAAA,MACzB,sBAAsB;AAAA,IACvB,CAAC;AACD,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,qBAAqB,MAWlB;AACF,UAAM;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACD,IAAI;AAEJ,UAAM,aAAa,KAAK,OAAO,mBAAmB,gBAAgB;AAClE,UAAM,yBAAyB,WAAW,KAAK,WAAW,MAAM,SAAS,IAAI;AAE7E,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,oCAAiB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,YAAY,cAAc,KAAK,cAAc,SAAS,KAAK;AAAA,MAC3D;AAAA,MACA;AAAA,MACA,qBAAqB,KAAK,IAAI;AAAA,MAC9B,eAAe;AAAA,MACf,yBAAyB,CAAC;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,cAAc,gBAAgB;AAAA,MAC9B;AAAA,MACA;AAAA,IACD,CAAC;AAED,QAAI,kBAAkB,YAAY;AACjC,WAAK,cAAc,IAAI,YAAY,cAAmB;AAAA,IACvD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,yBAAkC;AACjC,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC7C,UAAI,QAAQ,UAAU,oCAAiB,WAAW;AACjD,YAAI,CAAC,QAAQ,sBAAsB;AAClC,iBAAO;AAAA,QACR;AAAA,MACD;AAAA,IACD;AACA,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBQ,2BACP,WACA,kBACA,wBACA,MACA,YACiD;AACjD,QAAI,CAAC,wBAAwB;AAC5B,aAAO,oBAAO,GAAG,kBAAc,oCAAc,IAAI,KAAK,CAAC,CAAC;AAAA,IACzD;AAEA,UAAM,SAAyB,CAAC;AAGhC,eAAW,CAAC,IAAI,GAAG,SAAK,uCAAyB,KAAK,IAAI,GAAG;AAC5D,UAAI,MAAM,QAAQ,GAAG,GAAG;AAEvB,cAAM,CAAC,MAAM,EAAE,IAAI;AACnB,cAAM,aAAa,KAAK,OAAO,uBAAuB,MAAM,kBAAkB,MAAM;AACpF,YAAI,WAAW,SAAS,SAAS;AAChC,eAAK,cAAc,WAAW,gDAA4B,cAAc;AACxE,iBAAO,oBAAO,IAAI,WAAW,MAAM;AAAA,QACpC;AACA,cAAM,WAAW,KAAK,OAAO,uBAAuB,IAAI,kBAAkB,MAAM;AAChF,YAAI,SAAS,SAAS,SAAS;AAC9B,eAAK,cAAc,WAAW,gDAA4B,cAAc;AACxE,iBAAO,oBAAO,IAAI,SAAS,MAAM;AAAA,QAClC;AACA,cAAM,YAAQ,wBAAW,WAAW,OAAO,SAAS,KAAK;AACzD,YAAI,OAAO;AACV,iBAAO,EAAE,IAAI,CAAC,yBAAa,OAAO,KAAK;AAAA,QACxC;AAAA,MACD,OAAO;AAEN,cAAM,kBAAkB,KAAK,OAAO,uBAAuB,KAAK,kBAAkB,MAAM;AACxF,YAAI,gBAAgB,SAAS,SAAS;AACrC,eAAK,cAAc,WAAW,gDAA4B,cAAc;AACxE,iBAAO,oBAAO,IAAI,gBAAgB,MAAM;AAAA,QACzC;AACA,eAAO,EAAE,IAAI,CAAC,yBAAa,KAAK,gBAAgB,KAAK;AAAA,MACtD;AAAA,IACD;AAGA,eAAW,MAAM,KAAK,SAAS;AAC9B,aAAO,EAAE,IAAI,CAAC,yBAAa,MAAM;AAAA,IAClC;AAEA,WAAO,oBAAO,GAAG,MAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,cAAc,WAAmB,SAAqC;AAC3E,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,uCAAuC;AACxD;AAAA,IACD;AACA,QAAI;AACH,cAAQ,QAAQ,MAAM;AAAA,QACrB,KAAK,WAAW;AACf,iBAAO,KAAK,qBAAqB,SAAS,OAAO;AAAA,QAClD;AAAA,QACA,KAAK,QAAQ;AACZ,iBAAO,KAAK,kBAAkB,SAAS,OAAO;AAAA,QAC/C;AAAA,QACA,KAAK,QAAQ;AACZ,cAAI,QAAQ,UAAU,oCAAiB,WAAW;AACjD,oBAAQ,sBAAsB,KAAK,IAAI;AAAA,UACxC;AACA,iBAAO,KAAK,oBAAoB,QAAQ,WAAW,EAAE,MAAM,OAAO,CAAC;AAAA,QACpE;AAAA,QACA,SAAS;AACR,kDAAsB,OAAO;AAAA,QAC9B;AAAA,MACD;AAAA,IACD,SAAS,GAAG;AACX,UAAI,aAAa,iCAAa;AAC7B,aAAK,cAAc,QAAQ,WAAW,EAAE,MAAM;AAAA,MAC/C,OAAO;AAEN,cAAM;AAAA,MACP;AAAA,IACD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,cAAc,WAAmB,aAAoD;AACpF,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,QAAS;AACd,QAAI,CAAC,aAAa;AACjB,WAAK,cAAc,SAAS;AAC5B;AAAA,IACD;AACA,QAAI,QAAQ,yBAAyB;AACpC,UAAI;AACH,YAAI,QAAQ,OAAO,QAAQ;AAE1B,cAAI;AACJ,kBAAQ,aAAa;AAAA,YACpB,KAAK,gDAA4B;AAEhC,6BAAe,wCAAwB;AACvC;AAAA,YACD,KAAK,gDAA4B;AAEhC,6BAAe,wCAAwB;AACvC;AAAA,YACD,KAAK,gDAA4B;AAEhC,6BAAe,wCAAwB;AACvC;AAAA,YACD;AAEC,6BAAe,wCAAwB;AACvC;AAAA,UACF;AACA,kBAAQ,OAAO,YAAY;AAAA,YAC1B,MAAM;AAAA,YACN,QAAQ;AAAA,UACT,CAAC;AAAA,QACF;AAAA,MACD,QAAQ;AAAA,MAER,UAAE;AACD,aAAK,cAAc,SAAS;AAAA,MAC7B;AAAA,IACD,OAAO;AACN,WAAK,cAAc,WAAW,WAAW;AAAA,IAC1C;AAAA,EACD;AAAA,EAEQ,oBAAoB;AAC3B,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC7C,WAAK,cAAc,QAAQ,SAAS;AAAA,IACrC;AAAA,EACD;AAAA,EAEQ,iBAAiB,KAAkC;AAC1D,UAAM,UAAU,IAAI,gBAAgB,KAAK,iBAAiB;AAC1D,QAAI,CAAC,QAAS;AACd,UAAM,EAAE,SAAS,KAAK,IAAI;AAC1B,SAAK,oBAAoB,IAAI,SAAS;AACtC,QAAI,SAAS;AAGZ,WAAK,kBAAkB;AACvB;AAAA,IACD;AACA,SAAK,eAAe,IAAI;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,yBAAyB,aAA+B;AAC/D,UAAM,YAAY,KAAK;AAEvB,QAAI,YAAY,gBAAgB,UAAU,eAAe;AACxD,aAAO,gDAA4B;AAAA,IACpC;AAEA,QAAI,YAAY,kBAAkB,KAAK,UAAU,kBAAkB,GAAG;AACrE,iBAAW,CAAC,YAAY,YAAY,KAAK,OAAO,QAAQ,YAAY,SAAS,GAAG;AAC/E,cAAM,aAAa,UAAU,UAAU,UAAU;AACjD,YAAI,eAAe,UAAa,eAAe,YAAY;AAC1D,iBAAO,gDAA4B;AAAA,QACpC;AAAA,MACD;AAAA,IACD;AACA,WAAO,gDAA4B;AAAA,EACpC;AAAA,EAEQ,qBACP,SACA,SACC;AAID,QAAI,uBAAuB,QAAQ;AAEnC,QAAI,yBAAyB,GAAG;AAC/B,6BAAuB;AAAA,IACxB;AAEA,YAAQ,0BAA0B,yBAAyB;AAC3D,QAAI,yBAAyB,GAAG;AAC/B;AAAA,IACD;AACA,QAAI,yBAAyB,GAAG;AAC/B;AACA,cAAQ,uBAAuB;AAAA,IAChC;AAEA,QAAI,wBAAwB,QAAQ,2BAAuB,0CAAyB,GAAG;AACtF,WAAK,cAAc,QAAQ,WAAW,gDAA4B,cAAc;AAChF;AAAA,IACD,WAAW,2BAAuB,0CAAyB,GAAG;AAC7D,WAAK,cAAc,QAAQ,WAAW,gDAA4B,cAAc;AAChF;AAAA,IACD;AAGA,QAAI,QAAQ,UAAU,MAAM;AAC3B,WAAK,cAAc,QAAQ,WAAW,gDAA4B,cAAc;AAChF;AAAA,IACD;AACA,UAAM,aAAa,KAAK,OAAO,mBAAmB,QAAQ,MAAM;AAChE,QAAI,CAAC,WAAW,IAAI;AACnB,WAAK,cAAc,QAAQ,WAAW,KAAK,yBAAyB,QAAQ,MAAM,CAAC;AACnF;AAAA,IACD;AAGA,QAAI,WAAW,MAAM,KAAK,CAAC,MAAM,EAAE,UAAU,YAAY,CAAC,EAAE,IAAI,GAAG;AAClE,WAAK,cAAc,QAAQ,WAAW,gDAA4B,cAAc;AAChF;AAAA,IACD;AAEA,UAAM,oBAAgB,sBAAQ,QAAQ,QAAQ,KAAK,gBAAgB,IAChE,KAAK,mBACL,QAAQ;AAEX,UAAM,yBAAyB,WAAW,MAAM,SAAS;AAEzD,UAAM,UAAU,OAAO,QAAkE;AACxF,WAAK,SAAS,IAAI,QAAQ,WAAW;AAAA,QACpC,OAAO,oCAAiB;AAAA,QACxB,WAAW,QAAQ;AAAA,QACnB,YAAY,QAAQ;AAAA,QACpB,QAAQ,QAAQ;AAAA,QAChB,kBAAkB;AAAA,QAClB;AAAA,QACA,qBAAqB,KAAK,IAAI;AAAA,QAC9B,eAAe;AAAA,QACf,yBAAyB,CAAC;AAAA,QAC1B,sBAAsB,QAAQ;AAAA,QAC9B,MAAM,QAAQ;AAAA,QACd,YAAY,QAAQ;AAAA,QACpB,cAAc,QAAQ;AAAA,QACtB,yBAAyB,QAAQ;AAAA,MAClC,CAAC;AACD,WAAK,oBAAoB,QAAQ,WAAW,GAAG;AAAA,IAChD;AAEA,UAAM,EAAE,eAAe,OAAO,IAAI,KAAK,QAAQ,YAAY,CAAC,QAAQ;AACnE,WAAK,iBAAiB,GAAG;AACzB,YAAM,aAAa,IAAI,gBAAgB,QAAQ,eAAe;AAC9D,YAAM,eAAe,KAAK;AAAA,QACzB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA;AAAA;AAAA;AAAA;AAAA,UAKC,MAAM,OAAO;AAAA,YACZ,CAAC,GAAG,KAAK,cAAc,OAAO,CAAC,EAC7B,OAAO,CAAC,MAAM,EAAE,OAAO,QAAQ,UAAU,EACzC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AAAA,UACvB;AAAA,UACA,SAAS,CAAC;AAAA,QACX;AAAA,MACD;AACA,UAAI,CAAC,aAAa,GAAI,QAAO;AAG7B,UAAI,UAAiC;AACrC,UAAI,cAAc,kBAAkB,KAAK,kBAAkB;AAC1D,cAAM,WAAW,KAAK;AAAA,UACrB,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,UACA,WAAW;AAAA,QACZ;AACA,YAAI,CAAC,SAAS,GAAI,QAAO;AACzB,kBAAU,SAAS;AAAA,MACpB,WAAW,YAAY;AACtB,sBAAU,oCAAc,WAAW,IAAI;AAAA,MACxC;AACA,aAAO;AAAA,QACN,MAAM;AAAA,QACN,kBAAkB,QAAQ;AAAA,QAC1B,eAAe,YAAY,UAAU,aAAa;AAAA,QAClD,qBAAiB,0CAAyB;AAAA,QAC1C,QAAQ,KAAK,OAAO,UAAU;AAAA,QAC9B,aAAa,IAAI,SAAS;AAAA,QAC1B,MAAM,EAAE,GAAG,aAAa,OAAO,GAAG,QAAQ;AAAA,QAC1C,YAAY,QAAQ;AAAA,QACpB,cAAc,QAAQ;AAAA,MACvB;AAAA,IACD,CAAC;AAED,SAAK,oBAAoB;AAEzB,QAAI,QAAQ;AACX,cAAQ,MAAM;AAAA,IACf;AAAA,EACD;AAAA,EAEQ,kBACP,SACA,SACC;AAED,QAAI,WAAW,QAAQ,UAAU,oCAAiB,WAAW;AAC5D;AAAA,IACD;AAEA,QAAI,SAAS;AACZ,cAAQ,sBAAsB,KAAK,IAAI;AAAA,IACxC;AAEA,UAAM,mBAAmB,CAAC,KAAK,uBAAuB;AAStD,UAAM,cAAc,CACnBA,UACA,IACA,IACA,QACA,UACI;AACJ,UAAI,CAACA,SAAQ,MAAO,CAAAA,SAAQ,QAAQ,EAAE,aAAa,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,EAAE;AACvF,MAAAA,SAAQ,MAAM,YAAY,EAAE,IAAI;AAChC,cAAQ,GAAG,CAAC,GAAG;AAAA,QACd,KAAK,yBAAa;AACjB,UAAAA,SAAQ,MAAM,KAAK,KAAK,EAAE,IAAI,GAAG,CAAC;AAClC;AAAA,QACD,KAAK,yBAAa;AACjB,mCAAO,UAAU,OAAO,2CAA2C;AACnE,UAAAA,SAAQ,MAAM,KAAK,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK;AAC5C;AAAA,QACD,KAAK,yBAAa;AACjB,UAAAA,SAAQ,MAAM,KAAK,QAAQ,KAAK,EAAE;AAClC;AAAA,QACD;AACC,kDAAsB,GAAG,CAAC,CAAC;AAAA,MAC7B;AAAA,IACD;AAEA,UAAM,cAAc,CACnB,SACAA,UACA,IACA,QACA,cACwB;AACxB,YAAM,MAAM,UACT,KAAK,OAAO,uBAAuB,QAAQ,QAAQ,kBAAkB,IAAI,IACzE,EAAE,MAAM,WAAoB,OAAO,OAAO;AAC7C,UAAI,IAAI,SAAS,SAAS;AACzB,cAAM,IAAI,gCAAY,IAAI,QAAQ,gDAA4B,cAAc;AAAA,MAC7E;AACA,UAAI,EAAE,OAAO,MAAM,IAAI;AAGvB,YAAM,MAAM,QAAQ,IAAI,EAAE;AAI1B,UAAI,WAAW;AACd,cAAMC,UAAS,UAAU,OAAO,MAAM,KAAK;AAC3C,YAAI,CAACA,QAAQ,QAAO,oBAAO,GAAG,MAAS;AACvC,YAAI,CAAC,IAAK,SAAQA;AAAA,MACnB;AAEA,UAAI,KAAK;AAGR,cAAM,iBAAa,+BAAa,6BAAe,KAAK,OAAO,OAAO,IAAI,QAAQ,CAAC;AAC/E,cAAM,WAAO,yCAAsB,KAAK,OAAO,UAAU;AACzD,YAAI,MAAM;AACT,kBAAQ,IAAI,IAAI,KAAK;AACrB,sBAAYD,UAAS,IAAI,CAAC,yBAAa,OAAO,IAAI,GAAG,KAAK,KAAK;AAAA,QAChE;AAAA,MACD,OAAO;AAIN,cAAM,iBAAa,+BAAa,6BAAe,KAAK,OAAO,OAAO,MAAM,QAAQ,CAAC;AACjF,8CAAe,OAAO,UAAU;AAChC,gBAAQ,IAAI,IAAI,KAAK;AACrB,oBAAYA,UAAS,IAAI,CAAC,yBAAa,KAAK,KAAK,GAAG,QAAW,MAAS;AAAA,MACzE;AAEA,aAAO,oBAAO,GAAG,MAAS;AAAA,IAC3B;AAEA,UAAM,gBAAgB,CACrB,SACAA,UACA,IACA,OACA,cACI;AAEJ,YAAM,MAAM,QAAQ,IAAI,EAAE;AAC1B,UAAI,CAAC,IAAK;AAEV,YAAM,iBAAa,+BAAa,6BAAe,KAAK,OAAO,OAAO,IAAI,QAAQ,CAAC;AAG/E,YAAM,aAAa,UAChB,KAAK,OAAO,uBAAuB,KAAK,QAAQ,kBAAkB,MAAM,IACxE,EAAE,MAAM,WAAoB,OAAO,IAAI;AAC1C,UAAI,WAAW,SAAS,SAAS;AAChC,cAAM,IAAI,gCAAY,WAAW,QAAQ,gDAA4B,cAAc;AAAA,MACpF;AAEA,UAAI,WAAW,UAAU,KAAK;AAE7B,cAAM,WAAO,sCAAmB,KAAK,OAAO,YAAY,gBAAgB;AACxE,YAAI,MAAM;AAET,cAAI,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAG;AAC3C,kBAAQ,IAAI,IAAI,KAAK,CAAC,CAAC;AACvB,sBAAYA,UAAS,IAAI,CAAC,yBAAa,OAAO,KAAK,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;AAAA,QACrE;AAAA,MACD,OAAO;AAIN,cAAM,cAAU,6BAAgB,WAAW,OAAO,KAAK;AAEvD,cAAM,WAAW,UACd,KAAK,OAAO,uBAAuB,SAAS,QAAQ,kBAAkB,IAAI,IAC1E,EAAE,MAAM,WAAoB,OAAO,QAAQ;AAE9C,YAAI,SAAS,SAAS,SAAS;AAC9B,gBAAM,IAAI,gCAAY,SAAS,QAAQ,gDAA4B,cAAc;AAAA,QAClF;AAEA,cAAM,WAAO,yCAAsB,KAAK,SAAS,OAAO,YAAY,gBAAgB;AACpF,YAAI,MAAM;AAET,cAAI,aAAa,CAAC,UAAU,KAAK,SAAS,KAAK,EAAG;AAClD,kBAAQ,IAAI,IAAI,SAAS,KAAK;AAC9B,sBAAYA,UAAS,IAAI,CAAC,yBAAa,OAAO,IAAI,GAAG,KAAK,SAAS,KAAK;AAAA,QACzE;AAAA,MACD;AAAA,IACD;AAEA,UAAM,EAAE,QAAQ,eAAe,QAAQ,IAAI,KAAK,QAAQ;AAAA,MACvD,CAAC,QAAQ;AACR,aAAK,iBAAiB,GAAG;AAIzB,cAAM,aAA4B,EAAE,OAAO,KAAK;AAChD,cAAM,kBAAiC,EAAE,OAAO,KAAK;AAErD,YAAI,KAAK,gBAAgB,SAAS,cAAc,cAAc,WAAW,QAAQ,UAAU;AAC1F,cAAI,CAAC,QAAS,OAAM,IAAI,MAAM,yCAAyC;AAEvE,gBAAM,KAAK,QAAQ;AACnB,gBAAM,CAAC,MAAM,GAAG,IAAI,QAAQ;AAC5B,gBAAM,EAAE,SAAS,IAAI,KAAK;AAC1B,kBAAQ,MAAM;AAAA,YACb,KAAK,yBAAa,KAAK;AAEtB,0BAAY,KAAK,eAAe,iBAAiB,IAAI;AAAA,gBACpD,GAAG;AAAA,gBACH;AAAA,gBACA;AAAA,cACD,CAAC;AACD;AAAA,YACD;AAAA,YACA,KAAK,yBAAa,OAAO;AAExB,4BAAc,KAAK,eAAe,iBAAiB,IAAI;AAAA,gBACtD,GAAG;AAAA,gBACH,IAAI,CAAC,wBAAY,KAAK,EAAE;AAAA,gBACxB,UAAU,CAAC,wBAAY,KAAK,QAAQ;AAAA,cACrC,CAAC;AACD;AAAA,YACD;AAAA,UACD;AAAA,QACD;AAKA,cAAM,WAAW,CAAC,aACjB,CAAC,YACA,KAAK,YAAY,IAAI,QAAQ,IAAI,QAAQ,iBAAiB,SAAS,CAAC,QAAQ;AAE9E,YAAI,QAAQ,MAAM;AAEjB,qBAAW,CAAC,IAAI,EAAE,SAAK,uCAAyB,QAAQ,IAAK,GAAG;AAC/D,oBAAQ,GAAG,CAAC,GAAG;AAAA,cACd,KAAK,yBAAa,KAAK;AAItB,oBAAI,CAAC,SAAS,GAAG,CAAC,EAAE,QAAQ,EAAG;AAG/B,oBACC,CAAC,KAAK,cAAc,IAAI,GAAG,CAAC,EAAE,QAAQ,KACtC,CAAC,KAAK,YAAY,IAAI,GAAG,CAAC,EAAE,QAAQ,GACnC;AACD,wBAAM,IAAI;AAAA,oBACT;AAAA,oBACA,gDAA4B;AAAA,kBAC7B;AAAA,gBACD;AACA,sBAAM,SAAS,GAAG,CAAC;AASnB,sBAAM,aAAa,UAAY,IAAI,IAAI,EAAE,KAAuB,OAAQ;AACxE,oBAAI,WAAW,cAAc,WAAW,aAAa,OAAO,UAAU;AACrE,uBAAK,KAAK;AAAA,oBACT;AAAA,oBACA,GAAG,WAAW,QAAQ,OAAO,OAAO,QAAQ;AAAA,oBAC5C;AAAA,oBACA;AAAA,oBACA,QAAQ;AAAA,kBACT;AACA;AAAA,gBACD;AAGA,oBAAI;AACJ,oBAAI,WAAW,KAAK,iBAAiB;AACpC,wBAAM,eAAe,KAAK,cAAc,OAAO,QAAQ;AACvD,sBAAI,cAAc;AACjB,gCAAY,CAAC,SAAS,SAAS;AAC9B,4BAAMC,UAAS;AAAA,wBACd,UACG;AAAA,0BACA,SAAS;AAAA,4BACR,WAAW,QAAQ;AAAA,4BACnB,YAAY,QAAQ;AAAA,4BACpB,MAAM,QAAQ;AAAA,0BACf;AAAA,0BACA,MAAM;AAAA,0BACN,MAAM;AAAA,0BACN;AAAA,wBACD,IACC;AAAA,0BACA,SAAS;AAAA,4BACR,WAAW,QAAQ;AAAA,4BACnB,YAAY,QAAQ;AAAA,4BACpB,MAAM,QAAQ;AAAA,0BACf;AAAA,0BACA,MAAM;AAAA,0BACN,MAAM;AAAA,0BACN;AAAA,wBACD;AAAA,sBACH;AACA,0BAAI,CAACA,SAAQ;AACZ,6BAAK,KAAK;AAAA,0BACT;AAAA,0BACA,OAAO;AAAA,0BACP;AAAA,0BACA;AAAA,0BACA,QAAQ;AAAA,wBACT;AACA,+BAAO;AAAA,sBACR;AAEA,6BAAO,UAAU,OAAOA;AAAA,oBACzB;AAAA,kBACD;AAAA,gBACD;AACA,4BAAY,KAAK,YAAY,IAAI,QAAQ,SAAS;AAClD;AAAA,cACD;AAAA,cACA,KAAK,yBAAa,OAAO;AACxB,sBAAM,MAAM,IAAI,IAAI,EAAE;AAEtB,oBAAI,CAAC,IAAK;AACV,oBAAI,CAAC,SAAS,IAAI,QAAQ,EAAG;AAG7B,sBAAM,iBAAiB,WAAW,KAAK,cAAc,IAAI,QAAQ;AACjE,sBAAM,YAAY,iBACf,CAAC,MAAS,SAAY;AACtB,wBAAMA,UAAS,eAAe;AAAA,oBAC7B,SAAS;AAAA,sBACR,WAAW,QAAQ;AAAA,sBACnB,YAAY,QAAQ;AAAA,sBACpB,MAAM,QAAQ;AAAA,oBACf;AAAA,oBACA,MAAM;AAAA,oBACN;AAAA,oBACA;AAAA,kBACD,CAAC;AACD,sBAAI,CAACA,SAAQ;AACZ,yBAAK,KAAK;AAAA,sBACT;AAAA,sBACA,IAAI;AAAA,sBACJ;AAAA,sBACA;AAAA,sBACA,QAAQ;AAAA,oBACT;AAAA,kBACD;AACA,yBAAOA;AAAA,gBACR,IACC;AAEH,8BAAc,KAAK,YAAY,IAAI,GAAG,CAAC,GAAG,SAAS;AACnD;AAAA,cACD;AAAA,cACA,KAAK,yBAAa,QAAQ;AACzB,sBAAM,MAAM,IAAI,IAAI,EAAE;AACtB,oBAAI,CAAC,KAAK;AAET;AAAA,gBACD;AACA,oBAAI,CAAC,SAAS,IAAI,QAAQ,EAAG;AAG7B,sBAAM,kBAAkB,WAAW,KAAK,cAAc,IAAI,QAAQ;AAClE,oBACC,mBACA,CAAC,gBAAgB;AAAA,kBAChB,SAAS;AAAA,oBACR,WAAW,QAAQ;AAAA,oBACnB,YAAY,QAAQ;AAAA,oBACpB,MAAM,QAAQ;AAAA,kBACf;AAAA,kBACA,MAAM;AAAA,kBACN,MAAM;AAAA,kBACN,MAAM;AAAA,gBACP,CAAC,GACA;AACD,uBAAK,KAAK;AAAA,oBACT;AAAA,oBACA,IAAI;AAAA,oBACJ;AAAA,oBACA;AAAA,oBACA,QAAQ;AAAA,kBACT;AACA;AAAA,gBACD;AAIA,oBAAI,OAAO,EAAE;AACb,4BAAY,YAAY,IAAI,IAAI,KAAK,MAAS;AAC9C;AAAA,cACD;AAAA,YACD;AAAA,UACD;AAAA,QACD;AAEA,eAAO,EAAE,YAAY,gBAAgB;AAAA,MACtC;AAAA,MACA,EAAE,IAAI,KAAK,eAAe,aAAa,iBAAiB;AAAA,IACzD;AAEA,SAAK,oBAAoB;AAEzB,QAAI;AACJ,QAAI,WAAW,SAAS;AAEvB,aAAO,WAAW,QAAQ,EAAE,iBAAa,oCAAc,OAAO,KAAK,CAAC,GAAG,MAAM,QAAQ;AAAA,IACtF;AAEA,YAAI,sBAAQ,OAAO,WAAW,OAAO,aAAa,QAAQ,IAAI,GAAG;AAChE,mBAAa;AAAA,QACZ,MAAM;AAAA,QACN,aAAa,QAAQ;AAAA,QACrB,aAAa;AAAA,QACb,QAAQ;AAAA,MACT;AAAA,IACD,WAAW,CAAC,OAAO,WAAW,OAAO,aAAa;AACjD,mBAAa;AAAA,QACZ,MAAM;AAAA,QACN,aAAa,QAAQ;AAAA,QACrB,aAAa;AAAA,QACb,QAAQ;AAAA,MACT;AAAA,IACD,WAAW,SAAS;AAGnB,YAAM,OAAO,KAAK;AAAA,QACjB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,OAAO,WAAW,MAAM;AAAA,QACxB,OAAO,WAAW,MAAM;AAAA,MACzB;AACA,UAAI,KAAK,IAAI;AACZ,qBAAa;AAAA,UACZ,MAAM;AAAA,UACN,aAAa,QAAQ;AAAA,UACrB,aAAa;AAAA,UACb,QAAQ,EAAE,gBAAgB,KAAK,MAAM;AAAA,QACtC;AAAA,MACD;AAAA,IAED;AAEA,QAAI,WAAW,YAAY;AAC1B,WAAK,oBAAoB,QAAQ,WAAW,UAAU;AAAA,IACvD;AACA,QAAI,OAAO,WAAW,SAAS,OAAO,gBAAgB,OAAO;AAC5D,WAAK;AAAA,QACJ;AAAA,UACC,MAAM;AAAA,YACL,GAAG,OAAO,WAAW,OAAO,KAAK;AAAA,YACjC,GAAG,OAAO,gBAAgB,OAAO,KAAK;AAAA,UACvC;AAAA,UACA,SAAS;AAAA,YACR,GAAI,OAAO,WAAW,OAAO,KAAK,WAAW,CAAC;AAAA,YAC9C,GAAI,OAAO,gBAAgB,OAAO,KAAK,WAAW,CAAC;AAAA,UACpD;AAAA,QACD;AAAA,QACA;AAAA,UACC,GAAG,OAAO,WAAW,OAAO;AAAA,UAC5B,GAAG,OAAO,gBAAgB,OAAO;AAAA,QAClC;AAAA,QACA,SAAS;AAAA,MACV;AAAA,IACD;AAEA,QAAI,OAAO,gBAAgB,OAAO;AACjC,qBAAe,MAAM;AACpB,aAAK,mBAAmB;AAAA,MACzB,CAAC;AAAA,IACF;AAEA,QAAI,OAAO,WAAW,SAAS,KAAK,oBAAoB;AACvD,YAAM,OAAO,OAAO,WAAW,MAAM;AACrC,qBAAe,MAAM;AACpB,YAAI;AACH,eAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAAA,QAClD,SAAS,GAAG;AACX,eAAK,KAAK,QAAQ,4BAA4B,CAAC;AAAA,QAChD;AAAA,MACD,CAAC;AAAA,IACF;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,YAAY,WAAmB;AAC9B,SAAK,cAAc,SAAS;AAAA,EAC7B;AACD;AAUO,MAAM,cAAqE;AAAA,EAChE,YAAY,IAAI,qBAAmB,WAAW;AAAA,EAE/D,IAAI,IAAuC;AAC1C,WAAO,KAAK,UAAU,IAAI,EAAE;AAAA,EAC7B;AAAA,EAEA,IAAI,IAAY,OAAgB;AAC/B,SAAK,UAAU,IAAI,IAAI,KAAK;AAAA,EAC7B;AAAA,EAEA,OAAO,IAAkB;AACxB,SAAK,UAAU,OAAO,EAAE;AAAA,EACzB;AAAA,EAEA,SAAS;AACR,WAAO,KAAK,UAAU,OAAO;AAAA,EAC9B;AACD;",
   "names": ["changes", "result"]
 }

package/dist-esm/index.d.mts

@@ -663,8 +663,11 @@ export declare type TLPresenceMode =
  * @public
  */
 export declare type TLRecordAuthorizer<Rec extends UnknownRecord, SessionMeta> = (args: {
-    /** The session performing the write, including its host-provided `meta` (e.g. the authenticated user id). */
+    /** The session performing the write: its host-provided `meta` (e.g. the authenticated user
+     *  id) and the canvas-lane `isReadonly` state, for hosts whose object-lane policy follows
+     *  canvas access. */
     session: {
+        isReadonly: boolean;
         meta: SessionMeta;
         sessionId: string;
     };

package/dist-esm/index.mjs

@@ -36,7 +36,7 @@ import {
 } from "./lib/TLSyncStorage.mjs";
 registerTldrawLibraryVersion(
   "@tldraw/sync-core",
-  "5.3.0-internal.fba91ed55f6c",
+  "5.3.0-next.2fa9c61a8de6",
   "esm"
 );
 export {

package/dist-esm/lib/TLSyncRoom.mjs

@@ -888,30 +888,38 @@ class TLSyncRoom {
                   );
                 }
                 const record = op[1];
+                const prevRecord = session ? txn.get(id) ?? null : null;
+                if (session && prevRecord && prevRecord.typeName !== record.typeName) {
+                  this.log?.warn?.(
+                    "skipping put that changes typeName",
+                    `${prevRecord.typeName} -> ${record.typeName}`,
+                    id,
+                    "session:",
+                    session.sessionId
+                  );
+                  continue;
+                }
                 let authorize;
                 if (session && this.authorizeRecord) {
-                  const prev = txn.get(id) ?? null;
-                  if (prev && prev.typeName !== record.typeName) {
-                    this.log?.warn?.(
-                      "skipping put that changes typeName",
-                      `${prev.typeName} -> ${record.typeName}`,
-                      id,
-                      "session:",
-                      session.sessionId
-                    );
-                    continue;
-                  }
                   const authorizePut = this.authorizerFor(record.typeName);
                   if (authorizePut) {
                     authorize = (prevRec, next) => {
                       const result2 = authorizePut(
                         prevRec ? {
-                          session: { sessionId: session.sessionId, meta: session.meta },
+                          session: {
+                            sessionId: session.sessionId,
+                            isReadonly: session.isReadonly,
+                            meta: session.meta
+                          },
                           type: "update",
                           prev: prevRec,
                           next
                         } : {
-                          session: { sessionId: session.sessionId, meta: session.meta },
+                          session: {
+                            sessionId: session.sessionId,
+                            isReadonly: session.isReadonly,
+                            meta: session.meta
+                          },
                           type: "create",
                           prev: null,
                           next
@@ -941,7 +949,11 @@ class TLSyncRoom {
                 const authorizePatch = session && this.authorizerFor(doc.typeName);
                 const authorize = authorizePatch ? (prev, next) => {
                   const result2 = authorizePatch({
-                    session: { sessionId: session.sessionId, meta: session.meta },
+                    session: {
+                      sessionId: session.sessionId,
+                      isReadonly: session.isReadonly,
+                      meta: session.meta
+                    },
                     type: "update",
                     prev,
                     next
@@ -968,7 +980,11 @@ class TLSyncRoom {
                 if (!canWrite(doc.typeName)) continue;
                 const authorizeRemove = session && this.authorizerFor(doc.typeName);
                 if (authorizeRemove && !authorizeRemove({
-                  session: { sessionId: session.sessionId, meta: session.meta },
+                  session: {
+                    sessionId: session.sessionId,
+                    isReadonly: session.isReadonly,
+                    meta: session.meta
+                  },
                   type: "delete",
                   prev: doc,
                   next: null

package/dist-esm/lib/TLSyncRoom.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/TLSyncRoom.ts"],
-  "sourcesContent": ["import {\n\tAtomMap,\n\tMigrationFailureReason,\n\tRecordType,\n\tSerializedSchema,\n\tStoreSchema,\n\tUnknownRecord,\n} from '@tldraw/store'\nimport {\n\tassert,\n\tassertExists,\n\texhaustiveSwitchError,\n\tgetOwnProperty,\n\tisEqual,\n\tisNativeStructuredClone,\n\tobjectMapEntriesIterable,\n\tResult,\n\tthrottle,\n} from '@tldraw/utils'\nimport { createNanoEvents } from 'nanoevents'\nimport {\n\tapplyObjectDiff,\n\tdiffRecord,\n\tNetworkDiff,\n\tObjectDiff,\n\tRecordOp,\n\tRecordOpType,\n\tValueOpType,\n} from './diff'\nimport { interval } from './interval'\nimport {\n\tgetTlsyncProtocolVersion,\n\tTLIncompatibilityReason,\n\tTLObjectStoreAccess,\n\tTLSocketClientSentEvent,\n\tTLSocketServerSentDataEvent,\n\tTLSocketServerSentEvent,\n} from './protocol'\nimport { applyAndDiffRecord, diffAndValidateRecord, validateRecord } from './recordDiff'\nimport {\n\tRoomSession,\n\tRoomSessionState,\n\tSESSION_IDLE_TIMEOUT,\n\tSESSION_REMOVAL_WAIT_TIME,\n\tSESSION_START_WAIT_TIME,\n} from './RoomSession'\nimport { TLSyncLog } from './TLSocketRoom'\nimport { TLSyncError, TLSyncErrorCloseEventCode, TLSyncErrorCloseEventReason } from './TLSyncClient'\nimport {\n\tTLSyncForwardDiff,\n\tTLSyncStorage,\n\tTLSyncStorageTransaction,\n\ttoNetworkDiff,\n} from './TLSyncStorage'\n\n/**\n * WebSocket interface for server-side room connections. This defines the contract\n * that socket implementations must follow to work with TLSyncRoom.\n *\n * @internal\n */\nexport interface TLRoomSocket<R extends UnknownRecord> {\n\t/**\n\t * Whether the socket connection is currently open and ready to send messages.\n\t */\n\tisOpen: boolean\n\t/**\n\t * Send a message to the connected client through this socket.\n\t *\n\t * @param msg - The server-sent event message to transmit\n\t */\n\tsendMessage(msg: TLSocketServerSentEvent<R>): void\n\t/**\n\t * Close the socket connection with optional status code and reason.\n\t *\n\t * @param code - WebSocket close code (optional)\n\t * @param reason - Human-readable close reason (optional)\n\t */\n\tclose(code?: number, reason?: string): void\n}\n\n/**\n * The minimum time interval (in milliseconds) between sending batched data messages\n * to clients. This debouncing prevents overwhelming clients with rapid updates.\n * @public\n */\nexport const DATA_MESSAGE_DEBOUNCE_INTERVAL = 1000 / 60\n\nconst timeSince = (time: number) => Date.now() - time\n\n/**\n * Snapshot of a room's complete state that can be persisted and restored.\n * Contains all documents, tombstones, and metadata needed to reconstruct the room.\n *\n * @public\n */\nexport interface RoomSnapshot {\n\t/**\n\t * The current logical clock value for the room\n\t */\n\tclock?: number\n\t/**\n\t * Clock value when document data was last changed (optional for backwards compatibility)\n\t */\n\tdocumentClock?: number\n\t/**\n\t * Array of all document records with their last modification clocks\n\t */\n\tdocuments: Array<{ state: UnknownRecord; lastChangedClock: number }>\n\t/**\n\t * Map of deleted record IDs to their deletion clock values (optional)\n\t */\n\ttombstones?: Record<string, number>\n\t/**\n\t * Clock value where tombstone history begins - older deletions are not tracked (optional)\n\t */\n\ttombstoneHistoryStartsAtClock?: number\n\t/**\n\t * Serialized schema used when creating this snapshot (optional)\n\t */\n\tschema?: SerializedSchema\n}\n\n/**\n * Authorizes a single record write from a client: any per-record, per-session rule the host wants\n * to enforce server-side \u2014 veto writes the session isn't allowed to make, or rewrite the record on\n * create. The session's `meta` carries whatever the rule needs (identity, roles, \u2026); for example,\n * force a comment's `authorId` to the signed-in user so nobody can post in someone else's name.\n *\n * Called on **create**, **update**, and **delete** of records whose `typeName` it's registered for\n * (see {@link TLRecordAuthorizers}), and only for client pushes \u2014 never for server-initiated writes.\n *\n * `prev` and `next` are always at the **server's** schema version: client writes are migrated\n * before the authorizer runs, so guarding or stamping a field never requires knowing what older\n * clients call it. On create, the record you return is what gets stored (after validation) \u2014 no\n * migration runs afterwards, so stamped fields can't be clobbered.\n *\n * Return `null` to reject the write \u2014 it's skipped and the client self-corrects, exactly like the\n * `objectAccess` gate. Otherwise the write is allowed, and:\n *\n * - on **create**, the record you return is what gets stored, so stamp identity fields here (e.g.\n *   set `authorId` from `session.meta`);\n * - on **update** and **delete**, only allow-vs-reject is used (the returned record's contents are\n *   ignored), so use them to veto changes to immutable fields or unauthorized deletes \u2014 return\n *   `next`/`prev` to allow, `null` to reject.\n *\n * \u26A0\uFE0E Runs synchronously inside the commit transaction, on the same path as every document edit \u2014 it\n * must be fast and do **no** I/O. `next`/`prev` are client-controlled records, so treat their\n * contents as untrusted; prefer returning `null` to reject over throwing, though a throw is\n * caught, logged, and treated as a rejection (fail closed) rather than crashing the push. For\n * expensive, async checks (e.g. resolving mentions against who can access a file), react after the\n * fact via `onCommittedChanges`.\n *\n * @public\n */\nexport type TLRecordAuthorizer<Rec extends UnknownRecord, SessionMeta> = (\n\targs: {\n\t\t/** The session performing the write, including its host-provided `meta` (e.g. the authenticated user id). */\n\t\tsession: { sessionId: string; meta: SessionMeta }\n\t} & (\n\t\t| { type: 'create'; prev: null; next: Rec }\n\t\t| { type: 'update'; prev: Rec; next: Rec }\n\t\t| { type: 'delete'; prev: Rec; next: null }\n\t)\n) => Rec | null\n\n/**\n * A map from record `typeName` to a {@link TLRecordAuthorizer} for that record type. Only listed\n * types are authorized; every other record writes through untouched, so this stays off the hot path\n * for the vast majority of writes (shape drags etc.).\n *\n * Each authorizer is typed to its record \u2014 e.g. `next` in the `comment` entry is a `TLComment` \u2014 so\n * renaming a field on the record makes the authorizer that reads it fail to compile, rather than\n * silently stamp or guard the wrong field.\n *\n * Presence records are never authorized (presence is per-session and ephemeral); registering the\n * presence typeName is a construction-time error.\n *\n * @public\n */\nexport type TLRecordAuthorizers<R extends UnknownRecord, SessionMeta> = {\n\t[K in R['typeName']]?: TLRecordAuthorizer<Extract<R, { typeName: K }>, SessionMeta>\n}\n\n/**\n * A collaborative workspace that manages multiple client sessions and synchronizes\n * document changes between them. The room serves as the authoritative source for\n * all document state and handles conflict resolution, schema migrations, and\n * real-time data distribution.\n *\n * @example\n * ```ts\n * const room = new TLSyncRoom({\n *   schema: mySchema,\n *   onDataChange: () => saveToDatabase(room.getSnapshot()),\n *   onPresenceChange: () => updateLiveCursors()\n * })\n *\n * // Handle new client connections\n * room.handleNewSession({\n *   sessionId: 'user-123',\n *   socket: webSocketAdapter,\n *   meta: { userId: '123', name: 'Alice' },\n *   isReadonly: false\n * })\n * ```\n *\n * @internal\n */\nexport class TLSyncRoom<R extends UnknownRecord, SessionMeta> {\n\t// A table of connected clients\n\treadonly sessions = new Map<string, RoomSession<R, SessionMeta>>()\n\n\tprivate lastDocumentClock = 0\n\n\tprivate pruneTimer: ReturnType<typeof setTimeout> | null = null\n\n\tpruneSessions = throttle(() => {\n\t\tif (this.pruneTimer) {\n\t\t\tclearTimeout(this.pruneTimer)\n\t\t\tthis.pruneTimer = null\n\t\t}\n\t\tfor (const client of this.sessions.values()) {\n\t\t\tswitch (client.state) {\n\t\t\t\tcase RoomSessionState.Connected: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.lastInteractionTime) > this.sessionIdleTimeout\n\t\t\t\t\tif (hasTimedOut || !client.socket.isOpen) {\n\t\t\t\t\t\tthis.cancelSession(client.sessionId)\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tcase RoomSessionState.AwaitingConnectMessage: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.sessionStartTime) > SESSION_START_WAIT_TIME\n\t\t\t\t\tif (hasTimedOut || !client.socket.isOpen) {\n\t\t\t\t\t\t// remove immediately\n\t\t\t\t\t\tthis.removeSession(client.sessionId)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tthis.scheduleFollowUpPrune()\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tcase RoomSessionState.AwaitingRemoval: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.cancellationTime) > SESSION_REMOVAL_WAIT_TIME\n\t\t\t\t\tif (hasTimedOut) {\n\t\t\t\t\t\tthis.removeSession(client.sessionId)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tthis.scheduleFollowUpPrune()\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tdefault: {\n\t\t\t\t\texhaustiveSwitchError(client)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}, 1000)\n\n\tprivate scheduleFollowUpPrune() {\n\t\tif (this.pruneTimer) return\n\t\tthis.pruneTimer = setTimeout(this.pruneSessions, SESSION_REMOVAL_WAIT_TIME + 100)\n\t}\n\n\treadonly presenceStore = new PresenceStore<R>()\n\n\tprivate disposables: Array<() => void> = []\n\n\tprivate _isClosed = false\n\n\t/**\n\t * Close the room and clean up all resources. Disconnects all sessions\n\t * and stops background processes.\n\t */\n\tclose() {\n\t\tthis.disposables.forEach((d) => d())\n\t\tthis.sessions.forEach((session) => {\n\t\t\tsession.socket.close()\n\t\t})\n\t\tthis._isClosed = true\n\t}\n\n\t/**\n\t * Check if the room has been closed and is no longer accepting connections.\n\t *\n\t * @returns True if the room is closed\n\t */\n\tisClosed() {\n\t\treturn this._isClosed\n\t}\n\n\treadonly events = createNanoEvents<{\n\t\troom_became_empty(): void\n\t\tsession_removed(args: { sessionId: string; meta: SessionMeta }): void\n\t}>()\n\n\t// Storage layer for documents, tombstones, and clocks\n\tprivate readonly storage: TLSyncStorage<R>\n\n\treadonly serializedSchema: SerializedSchema\n\n\treadonly documentTypes: Set<string>\n\t/**\n\t * Record types served by the object-store lane. Object records ride the same wire messages\n\t * as document records but are gated by the session's `objectAccess` instead of `isReadonly`,\n\t * and are excluded from `documentTypes` so hosts can persist them in a separate lane.\n\t */\n\treadonly objectTypes: Set<string>\n\treadonly presenceType: RecordType<R, any> | null\n\tprivate log?: TLSyncLog\n\tpublic readonly schema: StoreSchema<R, any>\n\tprivate onPresenceChange?(): void\n\tprivate onCommittedChanges?(args: { diff: TLSyncForwardDiff<R>; documentClock: number }): void\n\tprivate readonly authorizeRecord?: TLRecordAuthorizers<R, SessionMeta>\n\tprivate readonly sessionIdleTimeout: number\n\n\t/**\n\t * The authorizer registered for a record type, widened to the room's record union. Each entry in\n\t * `authorizeRecord` is typed to its specific record; the cast here is the one place we can't\n\t * statically correlate a runtime `typeName` with its record type, so it lives in the library\n\t * rather than in every consumer.\n\t */\n\tprivate authorizerFor(typeName: R['typeName']): TLRecordAuthorizer<R, SessionMeta> | undefined {\n\t\tconst authorize = this.authorizeRecord?.[typeName] as\n\t\t\t| TLRecordAuthorizer<R, SessionMeta>\n\t\t\t| undefined\n\t\tif (!authorize) return undefined\n\t\t// Fail closed: an authorizer that throws rejects the write (and is logged) rather than\n\t\t// aborting the whole push. Authorizers are security-sensitive, so a bug must never let a\n\t\t// write through.\n\t\treturn (args) => {\n\t\t\ttry {\n\t\t\t\treturn authorize(args)\n\t\t\t} catch (e) {\n\t\t\t\tthis.log?.error?.('record authorizer threw; rejecting the write', e)\n\t\t\t\treturn null\n\t\t\t}\n\t\t}\n\t}\n\n\tconstructor(opts: {\n\t\tlog?: TLSyncLog\n\t\tschema: StoreSchema<R, any>\n\t\tonPresenceChange?(): void\n\t\t/**\n\t\t * Called once after a client push commits, with the committed document diff. Fires for\n\t\t * local and remote pushes. Use this to react to document changes (e.g. persist certain\n\t\t * record types to a separate lane, or project them to an external store) as soon as they\n\t\t * commit. Best-effort \u2014 do not throw; do not block.\n\t\t */\n\t\tonCommittedChanges?(args: { diff: TLSyncForwardDiff<R>; documentClock: number }): void\n\t\t/**\n\t\t * Record type names to serve through the object-store lane instead of the document lane.\n\t\t * Each must be a document-scoped type registered in the schema. Object-lane writes are\n\t\t * gated per session by `objectAccess` rather than `isReadonly`.\n\t\t */\n\t\tobjectTypes?: readonly string[]\n\t\t/**\n\t\t * Per-type authorizers for client record writes (create, update, delete): veto or, on\n\t\t * create, rewrite. See {@link TLRecordAuthorizers}.\n\t\t */\n\t\tauthorizeRecord?: TLRecordAuthorizers<R, SessionMeta>\n\t\tstorage: TLSyncStorage<R>\n\t\tclientTimeout?: number\n\t}) {\n\t\tthis.schema = opts.schema\n\t\tthis.log = opts.log\n\t\tthis.onPresenceChange = opts.onPresenceChange\n\t\tthis.onCommittedChanges = opts.onCommittedChanges\n\t\tthis.authorizeRecord = opts.authorizeRecord\n\t\tthis.storage = opts.storage\n\t\tthis.sessionIdleTimeout = opts.clientTimeout ?? SESSION_IDLE_TIMEOUT\n\n\t\tassert(\n\t\t\tisNativeStructuredClone,\n\t\t\t'TLSyncRoom is supposed to run either on Cloudflare Workers' +\n\t\t\t\t'or on a 18+ version of Node.js, which both support the native structuredClone API'\n\t\t)\n\n\t\t// do a json serialization cycle to make sure the schema has no 'undefined' values\n\t\tthis.serializedSchema = JSON.parse(JSON.stringify(this.schema.serialize()))\n\n\t\tthis.objectTypes = new Set(opts.objectTypes ?? [])\n\t\tfor (const typeName of this.objectTypes) {\n\t\t\tconst type = getOwnProperty(this.schema.types, typeName)\n\t\t\tassert(type, `TLSyncRoom: object type '${typeName}' is not registered in the schema`)\n\t\t\tassert(\n\t\t\t\ttype.scope === 'document',\n\t\t\t\t`TLSyncRoom: object type '${typeName}' must have scope 'document', got '${type.scope}'`\n\t\t\t)\n\t\t}\n\n\t\t// object-lane types are partitioned out of the document lane\n\t\tthis.documentTypes = new Set(\n\t\t\tObject.values<RecordType<R, any>>(this.schema.types)\n\t\t\t\t.filter((t) => t.scope === 'document' && !this.objectTypes.has(t.typeName))\n\t\t\t\t.map((t) => t.typeName)\n\t\t)\n\n\t\tconst presenceTypes = new Set(\n\t\t\tObject.values<RecordType<R, any>>(this.schema.types).filter((t) => t.scope === 'presence')\n\t\t)\n\n\t\tif (presenceTypes.size > 1) {\n\t\t\tthrow new Error(\n\t\t\t\t`TLSyncRoom: exactly zero or one presence type is expected, but found ${presenceTypes.size}`\n\t\t\t)\n\t\t}\n\n\t\tthis.presenceType = presenceTypes.values().next()?.value ?? null\n\n\t\t// The presence lane never consults authorizers, so a presence key in `authorizeRecord`\n\t\t// would be a silent no-op \u2014 fail loudly at construction instead.\n\t\tif (this.presenceType && this.authorizeRecord) {\n\t\t\tassert(\n\t\t\t\t!getOwnProperty(this.authorizeRecord, this.presenceType.typeName),\n\t\t\t\t`TLSyncRoom: authorizeRecord['${this.presenceType.typeName}'] is a presence type; presence records are not authorized`\n\t\t\t)\n\t\t}\n\n\t\tconst { documentClock } = this.storage.transaction((txn) => {\n\t\t\tthis.schema.migrateStorage(txn)\n\t\t})\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tthis.disposables.push(\n\t\t\tthis.storage.onChange(({ id }) => {\n\t\t\t\tif (id !== this.internalTxnId) {\n\t\t\t\t\tthis.broadcastExternalStorageChanges()\n\t\t\t\t}\n\t\t\t})\n\t\t)\n\n\t\tthis.disposables.push(() => {\n\t\t\tthis.pruneSessions.cancel()\n\t\t\tif (this.pruneTimer) {\n\t\t\t\tclearTimeout(this.pruneTimer)\n\t\t\t\tthis.pruneTimer = null\n\t\t\t}\n\t\t})\n\n\t\t// When clientTimeout is finite, run periodic pruning so idle sessions are\n\t\t// cleaned up even with no traffic. When Infinity or 0 we skip the interval\n\t\t// (e.g. for hibernation); without it, pruning only runs on message or when\n\t\t// socket close/error triggers cancelSession, so pruning idle sessions\n\t\t// reliably depends on the runtime delivering those events.\n\t\tif (Number.isFinite(this.sessionIdleTimeout) && this.sessionIdleTimeout > 0) {\n\t\t\tconst pruneIntervalMs = Math.min(2000, Math.floor(this.sessionIdleTimeout / 4))\n\t\t\tthis.disposables.push(interval(() => this.pruneSessions(), pruneIntervalMs))\n\t\t}\n\t}\n\tprivate broadcastExternalStorageChanges() {\n\t\tthis.storage.transaction((txn) => {\n\t\t\tthis.broadcastChanges(txn)\n\t\t\tthis.lastDocumentClock = txn.getClock()\n\t\t}) // no id needed because this only reads, no writes.\n\t}\n\n\t/**\n\t * Send a message to a particular client. Debounces data events\n\t *\n\t * @param sessionId - The id of the session to send the message to.\n\t * @param message - The message to send. UNSAFE Any diffs must have been downgraded already if necessary\n\t */\n\tprivate _unsafe_sendMessage(\n\t\tsessionId: string,\n\t\tmessage: TLSocketServerSentEvent<R> | TLSocketServerSentDataEvent<R>\n\t) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Tried to send message to unknown session', message.type)\n\t\t\treturn\n\t\t}\n\t\tif (session.state !== RoomSessionState.Connected) {\n\t\t\tthis.log?.warn?.('Tried to send message to disconnected client', message.type)\n\t\t\treturn\n\t\t}\n\t\tif (session.socket.isOpen) {\n\t\t\tif (message.type !== 'patch' && message.type !== 'push_result') {\n\t\t\t\t// this is not a data message\n\t\t\t\tif (message.type !== 'pong') {\n\t\t\t\t\t// non-data messages like \"connect\" might still need to be ordered correctly with\n\t\t\t\t\t// respect to data messages, so it's better to flush just in case\n\t\t\t\t\tthis._flushDataMessages(sessionId)\n\t\t\t\t}\n\t\t\t\tsession.socket.sendMessage(message)\n\t\t\t} else {\n\t\t\t\tif (session.debounceTimer === null) {\n\t\t\t\t\t// this is the first message since the last flush, don't delay it\n\t\t\t\t\tsession.socket.sendMessage({ type: 'data', data: [message] })\n\n\t\t\t\t\tsession.debounceTimer = setTimeout(\n\t\t\t\t\t\t() => this._flushDataMessages(sessionId),\n\t\t\t\t\t\tDATA_MESSAGE_DEBOUNCE_INTERVAL\n\t\t\t\t\t)\n\t\t\t\t} else {\n\t\t\t\t\tsession.outstandingDataMessages.push(message)\n\t\t\t\t}\n\t\t\t}\n\t\t} else {\n\t\t\tthis.cancelSession(session.sessionId)\n\t\t}\n\t}\n\n\t// needs to accept sessionId and not a session because the session might be dead by the time\n\t// the timer fires\n\t_flushDataMessages(sessionId: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\n\t\tif (!session || session.state !== RoomSessionState.Connected) {\n\t\t\treturn\n\t\t}\n\n\t\tsession.debounceTimer = null\n\n\t\tif (session.outstandingDataMessages.length > 0) {\n\t\t\t// hand the buffer over and start a fresh one, rather than truncating in\n\t\t\t// place, so sockets that defer serialization don't see an emptied array\n\t\t\tconst data = session.outstandingDataMessages\n\t\t\tsession.outstandingDataMessages = []\n\t\t\tsession.socket.sendMessage({ type: 'data', data })\n\t\t}\n\t}\n\n\t/** @internal */\n\tprivate removeSession(sessionId: string, fatalReason?: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Tried to remove unknown session')\n\t\t\treturn\n\t\t}\n\n\t\tthis.sessions.delete(sessionId)\n\n\t\ttry {\n\t\t\tif (fatalReason) {\n\t\t\t\tsession.socket.close(TLSyncErrorCloseEventCode, fatalReason)\n\t\t\t} else {\n\t\t\t\tsession.socket.close()\n\t\t\t}\n\t\t} catch {\n\t\t\t// noop, calling .close() multiple times is fine\n\t\t}\n\n\t\tconst presence = this.presenceStore.get(session.presenceId ?? '')\n\t\tif (presence) {\n\t\t\tthis.presenceStore.delete(session.presenceId!)\n\t\t\t// Broadcast presence removal - use RecordsDiff with the removed record\n\t\t\tthis.broadcastPatch({\n\t\t\t\tputs: {},\n\t\t\t\tdeletes: [session.presenceId!],\n\t\t\t})\n\t\t}\n\n\t\tthis.events.emit('session_removed', { sessionId, meta: session.meta })\n\t\tif (this.sessions.size === 0) {\n\t\t\tthis.events.emit('room_became_empty')\n\t\t}\n\t}\n\n\tprivate cancelSession(sessionId: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\treturn\n\t\t}\n\n\t\tif (session.state === RoomSessionState.AwaitingRemoval) {\n\t\t\tthis.log?.warn?.('Tried to cancel session that is already awaiting removal')\n\t\t\treturn\n\t\t}\n\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.AwaitingRemoval,\n\t\t\tsessionId,\n\t\t\tpresenceId: session.presenceId,\n\t\t\tsocket: session.socket,\n\t\t\tcancellationTime: Date.now(),\n\t\t\tmeta: session.meta,\n\t\t\tisReadonly: session.isReadonly,\n\t\t\tobjectAccess: session.objectAccess,\n\t\t\trequiresLegacyRejection: session.requiresLegacyRejection,\n\t\t\tsupportsStringAppend: session.supportsStringAppend,\n\t\t})\n\n\t\ttry {\n\t\t\tsession.socket.close()\n\t\t} catch {\n\t\t\t// noop, calling .close() multiple times is fine\n\t\t}\n\n\t\tthis.scheduleFollowUpPrune()\n\t}\n\n\treadonly internalTxnId = 'TLSyncRoom.txn'\n\n\t/**\n\t * Broadcast a patch to all connected clients except the one with the sessionId provided.\n\t *\n\t * @param diff - The TLSyncForwardDiff with full records (used for migration)\n\t * @param networkDiff - Optional pre-computed NetworkDiff for sessions not needing migration.\n\t *                      If not provided, will be computed from recordsDiff.\n\t * @param sourceSessionId - Optional session ID to exclude from the broadcast\n\t */\n\tprivate broadcastPatch(\n\t\tdiff: TLSyncForwardDiff<R>,\n\t\tnetworkDiff?: NetworkDiff<R> | null,\n\t\tsourceSessionId?: string\n\t) {\n\t\t// Pre-compute network diff if not provided\n\t\tconst unmigrated = networkDiff ?? toNetworkDiff(diff)\n\t\tif (!unmigrated) return this\n\n\t\tthis.sessions.forEach((session) => {\n\t\t\tif (session.state !== RoomSessionState.Connected) return\n\t\t\tif (sourceSessionId === session.sessionId) return\n\t\t\tif (!session.socket.isOpen) {\n\t\t\t\tthis.cancelSession(session.sessionId)\n\t\t\t\treturn\n\t\t\t}\n\n\t\t\tconst diffResult = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsession.serializedSchema,\n\t\t\t\tsession.requiresDownMigrations,\n\t\t\t\tdiff\n\t\t\t)\n\t\t\tif (!diffResult.ok) return\n\n\t\t\tthis._unsafe_sendMessage(session.sessionId, {\n\t\t\t\ttype: 'patch',\n\t\t\t\tdiff: diffResult.value,\n\t\t\t\tserverClock: this.lastDocumentClock,\n\t\t\t})\n\t\t})\n\t\treturn this\n\t}\n\n\t/**\n\t * Send a custom message to a connected client. Useful for application-specific\n\t * communication that doesn't involve document synchronization.\n\t *\n\t * @param sessionId - The ID of the session to send the message to\n\t * @param data - The custom payload to send (will be JSON serialized)\n\t * @example\n\t * ```ts\n\t * // Send a custom notification\n\t * room.sendCustomMessage('user-123', {\n\t *   type: 'notification',\n\t *   message: 'Document saved successfully'\n\t * })\n\t *\n\t * // Send user-specific data\n\t * room.sendCustomMessage('user-456', {\n\t *   type: 'user_permissions',\n\t *   canEdit: true,\n\t *   canDelete: false\n\t * })\n\t * ```\n\t */\n\tsendCustomMessage(sessionId: string, data: any): void {\n\t\tthis._unsafe_sendMessage(sessionId, { type: 'custom', data })\n\t}\n\n\t/**\n\t * Register a new client session with the room. The session will be in an awaiting\n\t * state until it sends a connect message with protocol handshake.\n\t *\n\t * @param opts - Session configuration\n\t *   - sessionId - Unique identifier for this session\n\t *   - socket - WebSocket adapter for communication\n\t *   - meta - Application-specific metadata for this session\n\t *   - isReadonly - Whether this session can modify documents\n\t * @returns This room instance for method chaining\n\t * @example\n\t * ```ts\n\t * room.handleNewSession({\n\t *   sessionId: crypto.randomUUID(),\n\t *   socket: new WebSocketAdapter(ws),\n\t *   meta: { userId: '123', name: 'Alice', avatar: 'url' },\n\t *   isReadonly: !hasEditPermission\n\t * })\n\t * ```\n\t *\n\t * @internal\n\t */\n\thandleNewSession(opts: {\n\t\tsessionId: string\n\t\tsocket: TLRoomSocket<R>\n\t\tmeta: SessionMeta\n\t\tisReadonly: boolean\n\t\tobjectAccess?: TLObjectStoreAccess\n\t}) {\n\t\tconst { sessionId, socket, meta, isReadonly, objectAccess } = opts\n\t\tconst existing = this.sessions.get(sessionId)\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.AwaitingConnectMessage,\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tpresenceId: existing?.presenceId ?? this.presenceType?.createId() ?? null,\n\t\t\tsessionStartTime: Date.now(),\n\t\t\tmeta,\n\t\t\tisReadonly: isReadonly ?? false,\n\t\t\tobjectAccess: objectAccess ?? 'write',\n\t\t\t// this gets set later during handleConnectMessage\n\t\t\trequiresLegacyRejection: false,\n\t\t\tsupportsStringAppend: true,\n\t\t})\n\t\treturn this\n\t}\n\n\t/**\n\t * Resume a previously-connected session directly into `Connected` state, bypassing the\n\t * connect handshake. Used after server hibernation when the WebSocket is still alive but\n\t * all in-memory state has been lost.\n\t *\n\t * @internal\n\t */\n\thandleResumedSession(opts: {\n\t\tsessionId: string\n\t\tsocket: TLRoomSocket<R>\n\t\tmeta: SessionMeta\n\t\tisReadonly: boolean\n\t\tobjectAccess?: TLObjectStoreAccess\n\t\tserializedSchema: SerializedSchema\n\t\tpresenceId: string | null\n\t\tpresenceRecord: UnknownRecord | null\n\t\trequiresLegacyRejection: boolean\n\t\tsupportsStringAppend: boolean\n\t}) {\n\t\tconst {\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tmeta,\n\t\t\tisReadonly,\n\t\t\tobjectAccess,\n\t\t\tserializedSchema,\n\t\t\tpresenceId,\n\t\t\tpresenceRecord,\n\t\t\trequiresLegacyRejection,\n\t\t\tsupportsStringAppend,\n\t\t} = opts\n\n\t\tconst migrations = this.schema.getMigrationsSince(serializedSchema)\n\t\tconst requiresDownMigrations = migrations.ok ? migrations.value.length > 0 : false\n\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.Connected,\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tpresenceId: presenceId ?? this.presenceType?.createId() ?? null,\n\t\t\tserializedSchema,\n\t\t\trequiresDownMigrations,\n\t\t\tlastInteractionTime: Date.now(),\n\t\t\tdebounceTimer: null,\n\t\t\toutstandingDataMessages: [],\n\t\t\tmeta,\n\t\t\tisReadonly,\n\t\t\tobjectAccess: objectAccess ?? 'write',\n\t\t\trequiresLegacyRejection,\n\t\t\tsupportsStringAppend,\n\t\t})\n\n\t\tif (presenceRecord && presenceId) {\n\t\t\tthis.presenceStore.set(presenceId, presenceRecord as R)\n\t\t}\n\t}\n\n\t/**\n\t * Checks if all connected sessions support string append operations (protocol version 8+).\n\t * If any client is on an older version, returns false to enable legacy append mode.\n\t *\n\t * @returns True if all connected sessions are on protocol version 8 or higher\n\t */\n\tgetCanEmitStringAppend(): boolean {\n\t\tfor (const session of this.sessions.values()) {\n\t\t\tif (session.state === RoomSessionState.Connected) {\n\t\t\t\tif (!session.supportsStringAppend) {\n\t\t\t\t\treturn false\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn true\n\t}\n\n\t/**\n\t * When we send a diff to a client, if that client is on a lower version than us, we need to make\n\t * the diff compatible with their version. This method takes a TLSyncForwardDiff (which has full\n\t * records) and migrates all records down to the client's schema version, returning a NetworkDiff.\n\t *\n\t * For updates (entries with [before, after] tuples), both records are migrated and a patch is\n\t * computed from the migrated versions, preserving efficient patch semantics even across versions.\n\t *\n\t * If a migration fails, the session will be rejected.\n\t *\n\t * @param sessionId - The session ID (for rejection on migration failure)\n\t * @param serializedSchema - The client's schema to migrate to\n\t * @param requiresDownMigrations - Whether the client needs down migrations\n\t * @param diff - The TLSyncForwardDiff containing full records to migrate\n\t * @param unmigrated - Optional pre-computed NetworkDiff for when no migration is needed\n\t * @returns A NetworkDiff with migrated records, or a migration failure\n\t */\n\tprivate migrateDiffOrRejectSession(\n\t\tsessionId: string,\n\t\tserializedSchema: SerializedSchema,\n\t\trequiresDownMigrations: boolean,\n\t\tdiff: TLSyncForwardDiff<R>,\n\t\tunmigrated?: NetworkDiff<R>\n\t): Result<NetworkDiff<R>, MigrationFailureReason> {\n\t\tif (!requiresDownMigrations) {\n\t\t\treturn Result.ok(unmigrated ?? toNetworkDiff(diff) ?? {})\n\t\t}\n\n\t\tconst result: NetworkDiff<R> = {}\n\n\t\t// Migrate puts (either adds or updates)\n\t\tfor (const [id, put] of objectMapEntriesIterable(diff.puts)) {\n\t\t\tif (Array.isArray(put)) {\n\t\t\t\t// Update: [before, after] tuple - migrate both and compute patch\n\t\t\t\tconst [from, to] = put\n\t\t\t\tconst fromResult = this.schema.migratePersistedRecord(from, serializedSchema, 'down')\n\t\t\t\tif (fromResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(fromResult.reason)\n\t\t\t\t}\n\t\t\t\tconst toResult = this.schema.migratePersistedRecord(to, serializedSchema, 'down')\n\t\t\t\tif (toResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(toResult.reason)\n\t\t\t\t}\n\t\t\t\tconst patch = diffRecord(fromResult.value, toResult.value)\n\t\t\t\tif (patch) {\n\t\t\t\t\tresult[id] = [RecordOpType.Patch, patch]\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Add: single record - migrate and put\n\t\t\t\tconst migrationResult = this.schema.migratePersistedRecord(put, serializedSchema, 'down')\n\t\t\t\tif (migrationResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(migrationResult.reason)\n\t\t\t\t}\n\t\t\t\tresult[id] = [RecordOpType.Put, migrationResult.value]\n\t\t\t}\n\t\t}\n\n\t\t// Deletes don't need migration\n\t\tfor (const id of diff.deletes) {\n\t\t\tresult[id] = [RecordOpType.Remove]\n\t\t}\n\n\t\treturn Result.ok(result)\n\t}\n\n\t/**\n\t * Process an incoming message from a client session. Handles connection requests,\n\t * data synchronization pushes, and ping/pong for connection health.\n\t *\n\t * @param sessionId - The ID of the session that sent the message\n\t * @param message - The client message to process\n\t * @example\n\t * ```ts\n\t * // Typically called by WebSocket message handlers\n\t * websocket.onMessage((data) => {\n\t *   const message = JSON.parse(data)\n\t *   room.handleMessage(sessionId, message)\n\t * })\n\t * ```\n\t */\n\tasync handleMessage(sessionId: string, message: TLSocketClientSentEvent<R>) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Received message from unknown session')\n\t\t\treturn\n\t\t}\n\t\ttry {\n\t\t\tswitch (message.type) {\n\t\t\t\tcase 'connect': {\n\t\t\t\t\treturn this.handleConnectRequest(session, message)\n\t\t\t\t}\n\t\t\t\tcase 'push': {\n\t\t\t\t\treturn this.handlePushRequest(session, message)\n\t\t\t\t}\n\t\t\t\tcase 'ping': {\n\t\t\t\t\tif (session.state === RoomSessionState.Connected) {\n\t\t\t\t\t\tsession.lastInteractionTime = Date.now()\n\t\t\t\t\t}\n\t\t\t\t\treturn this._unsafe_sendMessage(session.sessionId, { type: 'pong' })\n\t\t\t\t}\n\t\t\t\tdefault: {\n\t\t\t\t\texhaustiveSwitchError(message)\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (e) {\n\t\t\tif (e instanceof TLSyncError) {\n\t\t\t\tthis.rejectSession(session.sessionId, e.reason)\n\t\t\t} else {\n\t\t\t\t// log error and reboot the room?\n\t\t\t\tthrow e\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Reject and disconnect a session due to incompatibility or other fatal errors.\n\t * Sends appropriate error messages before closing the connection.\n\t *\n\t * @param sessionId - The session to reject\n\t * @param fatalReason - The reason for rejection (optional)\n\t * @example\n\t * ```ts\n\t * // Reject due to version mismatch\n\t * room.rejectSession('user-123', TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t *\n\t * // Reject due to permission issue\n\t * room.rejectSession('user-456', 'Insufficient permissions')\n\t * ```\n\t */\n\trejectSession(sessionId: string, fatalReason?: TLSyncErrorCloseEventReason | string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) return\n\t\tif (!fatalReason) {\n\t\t\tthis.removeSession(sessionId)\n\t\t\treturn\n\t\t}\n\t\tif (session.requiresLegacyRejection) {\n\t\t\ttry {\n\t\t\t\tif (session.socket.isOpen) {\n\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\tlet legacyReason: TLIncompatibilityReason\n\t\t\t\t\tswitch (fatalReason) {\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.CLIENT_TOO_OLD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.ClientTooOld\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.SERVER_TOO_OLD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.ServerTooOld\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.INVALID_RECORD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.InvalidRecord\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tdefault:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.InvalidOperation\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t}\n\t\t\t\t\tsession.socket.sendMessage({\n\t\t\t\t\t\ttype: 'incompatibility_error',\n\t\t\t\t\t\treason: legacyReason,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t} catch {\n\t\t\t\t// noop\n\t\t\t} finally {\n\t\t\t\tthis.removeSession(sessionId)\n\t\t\t}\n\t\t} else {\n\t\t\tthis.removeSession(sessionId, fatalReason)\n\t\t}\n\t}\n\n\tprivate forceAllReconnect() {\n\t\tfor (const session of this.sessions.values()) {\n\t\t\tthis.removeSession(session.sessionId)\n\t\t}\n\t}\n\n\tprivate broadcastChanges(txn: TLSyncStorageTransaction<R>) {\n\t\tconst changes = txn.getChangesSince(this.lastDocumentClock)\n\t\tif (!changes) return\n\t\tconst { wipeAll, diff } = changes\n\t\tthis.lastDocumentClock = txn.getClock()\n\t\tif (wipeAll) {\n\t\t\t// If this happens it means we'd need to broadcast a wipe_all message to all clients,\n\t\t\t// which is not part of the protocol yet, so we need to force all clients to reconnect instead.\n\t\t\tthis.forceAllReconnect()\n\t\t\treturn\n\t\t}\n\t\tthis.broadcastPatch(diff)\n\t}\n\n\t/**\n\t * Work out whether a client we can't reconcile schemas with is running a newer or older SDK\n\t * than us.\n\t */\n\tprivate getVersionMismatchReason(theirSchema: SerializedSchema) {\n\t\tconst ourSchema = this.serializedSchema\n\n\t\tif (theirSchema.schemaVersion > ourSchema.schemaVersion) {\n\t\t\treturn TLSyncErrorCloseEventReason.SERVER_TOO_OLD\n\t\t}\n\n\t\tif (theirSchema.schemaVersion === 2 && ourSchema.schemaVersion === 2) {\n\t\t\tfor (const [sequenceId, theirVersion] of Object.entries(theirSchema.sequences)) {\n\t\t\t\tconst ourVersion = ourSchema.sequences[sequenceId]\n\t\t\t\tif (ourVersion === undefined || theirVersion > ourVersion) {\n\t\t\t\t\treturn TLSyncErrorCloseEventReason.SERVER_TOO_OLD\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn TLSyncErrorCloseEventReason.CLIENT_TOO_OLD\n\t}\n\n\tprivate handleConnectRequest(\n\t\tsession: RoomSession<R, SessionMeta>,\n\t\tmessage: Extract<TLSocketClientSentEvent<R>, { type: 'connect' }>\n\t) {\n\t\t// if the protocol versions don't match, disconnect the client\n\t\t// we will eventually want to try to make our protocol backwards compatible to some degree\n\t\t// and have a MIN_PROTOCOL_VERSION constant that the TLSyncRoom implements support for\n\t\tlet theirProtocolVersion = message.protocolVersion\n\t\t// 5 is the same as 6\n\t\tif (theirProtocolVersion === 5) {\n\t\t\ttheirProtocolVersion = 6\n\t\t}\n\t\t// 6 is almost the same as 7\n\t\tsession.requiresLegacyRejection = theirProtocolVersion === 6\n\t\tif (theirProtocolVersion === 6) {\n\t\t\ttheirProtocolVersion++\n\t\t}\n\t\tif (theirProtocolVersion === 7) {\n\t\t\ttheirProtocolVersion++\n\t\t\tsession.supportsStringAppend = false\n\t\t}\n\n\t\tif (theirProtocolVersion == null || theirProtocolVersion < getTlsyncProtocolVersion()) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t} else if (theirProtocolVersion > getTlsyncProtocolVersion()) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.SERVER_TOO_OLD)\n\t\t\treturn\n\t\t}\n\t\t// If the client's store is at a different version to ours, it could cause corruption.\n\t\t// We should disconnect the client and ask them to refresh.\n\t\tif (message.schema == null) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t}\n\t\tconst migrations = this.schema.getMigrationsSince(message.schema)\n\t\tif (!migrations.ok) {\n\t\t\tthis.rejectSession(session.sessionId, this.getVersionMismatchReason(message.schema))\n\t\t\treturn\n\t\t}\n\t\t// The client's schema is older than ours, but we can't migrate our data down to their\n\t\t// version (a migration isn't record-scoped or has no down migration), so they're too old.\n\t\tif (migrations.value.some((m) => m.scope !== 'record' || !m.down)) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t}\n\n\t\tconst sessionSchema = isEqual(message.schema, this.serializedSchema)\n\t\t\t? this.serializedSchema\n\t\t\t: message.schema\n\n\t\tconst requiresDownMigrations = migrations.value.length > 0\n\n\t\tconst connect = async (msg: Extract<TLSocketServerSentEvent<R>, { type: 'connect' }>) => {\n\t\t\tthis.sessions.set(session.sessionId, {\n\t\t\t\tstate: RoomSessionState.Connected,\n\t\t\t\tsessionId: session.sessionId,\n\t\t\t\tpresenceId: session.presenceId,\n\t\t\t\tsocket: session.socket,\n\t\t\t\tserializedSchema: sessionSchema,\n\t\t\t\trequiresDownMigrations,\n\t\t\t\tlastInteractionTime: Date.now(),\n\t\t\t\tdebounceTimer: null,\n\t\t\t\toutstandingDataMessages: [],\n\t\t\t\tsupportsStringAppend: session.supportsStringAppend,\n\t\t\t\tmeta: session.meta,\n\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\tobjectAccess: session.objectAccess,\n\t\t\t\trequiresLegacyRejection: session.requiresLegacyRejection,\n\t\t\t})\n\t\t\tthis._unsafe_sendMessage(session.sessionId, msg)\n\t\t}\n\n\t\tconst { documentClock, result } = this.storage.transaction((txn) => {\n\t\t\tthis.broadcastChanges(txn)\n\t\t\tconst docChanges = txn.getChangesSince(message.lastServerClock)\n\t\t\tconst presenceDiff = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsessionSchema,\n\t\t\t\trequiresDownMigrations,\n\t\t\t\t{\n\t\t\t\t\t// Exclude the connecting session's own presence \u2014 it will push fresh\n\t\t\t\t\t// data immediately after connecting. Sending the stale record back\n\t\t\t\t\t// would leave an orphaned presence in the client's local store (the\n\t\t\t\t\t// server never echoes a session's own updates back to it).\n\t\t\t\t\tputs: Object.fromEntries(\n\t\t\t\t\t\t[...this.presenceStore.values()]\n\t\t\t\t\t\t\t.filter((p) => p.id !== session.presenceId)\n\t\t\t\t\t\t\t.map((p) => [p.id, p])\n\t\t\t\t\t),\n\t\t\t\t\tdeletes: [],\n\t\t\t\t}\n\t\t\t)\n\t\t\tif (!presenceDiff.ok) return null\n\n\t\t\t// Migrate the diff if needed, or use the pre-computed network diff\n\t\t\tlet docDiff: NetworkDiff<R> | null = null\n\t\t\tif (docChanges && sessionSchema !== this.serializedSchema) {\n\t\t\t\tconst migrated = this.migrateDiffOrRejectSession(\n\t\t\t\t\tsession.sessionId,\n\t\t\t\t\tsessionSchema,\n\t\t\t\t\trequiresDownMigrations,\n\t\t\t\t\tdocChanges.diff\n\t\t\t\t)\n\t\t\t\tif (!migrated.ok) return null\n\t\t\t\tdocDiff = migrated.value\n\t\t\t} else if (docChanges) {\n\t\t\t\tdocDiff = toNetworkDiff(docChanges.diff)\n\t\t\t}\n\t\t\treturn {\n\t\t\t\ttype: 'connect',\n\t\t\t\tconnectRequestId: message.connectRequestId,\n\t\t\t\thydrationType: docChanges?.wipeAll ? 'wipe_all' : 'wipe_presence',\n\t\t\t\tprotocolVersion: getTlsyncProtocolVersion(),\n\t\t\t\tschema: this.schema.serialize(),\n\t\t\t\tserverClock: txn.getClock(),\n\t\t\t\tdiff: { ...presenceDiff.value, ...docDiff },\n\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\tobjectAccess: session.objectAccess,\n\t\t\t} satisfies Extract<TLSocketServerSentEvent<R>, { type: 'connect' }>\n\t\t}) // no id needed because this only reads, no writes.\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tif (result) {\n\t\t\tconnect(result)\n\t\t}\n\t}\n\n\tprivate handlePushRequest(\n\t\tsession: RoomSession<R, SessionMeta> | null,\n\t\tmessage: Extract<TLSocketClientSentEvent<R>, { type: 'push' }>\n\t) {\n\t\t// We must be connected to handle push requests\n\t\tif (session && session.state !== RoomSessionState.Connected) {\n\t\t\treturn\n\t\t}\n\t\t// update the last interaction time\n\t\tif (session) {\n\t\t\tsession.lastInteractionTime = Date.now()\n\t\t}\n\n\t\tconst legacyAppendMode = !this.getCanEmitStringAppend()\n\n\t\tinterface ActualChanges {\n\t\t\tdiffs: {\n\t\t\t\tnetworkDiff: NetworkDiff<R>\n\t\t\t\tdiff: TLSyncForwardDiff<R>\n\t\t\t} | null\n\t\t}\n\n\t\tconst propagateOp = (\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\top: RecordOp<R>,\n\t\t\tbefore: R | undefined,\n\t\t\tafter: R | undefined\n\t\t) => {\n\t\t\tif (!changes.diffs) changes.diffs = { networkDiff: {}, diff: { puts: {}, deletes: [] } }\n\t\t\tchanges.diffs.networkDiff[id] = op\n\t\t\tswitch (op[0]) {\n\t\t\t\tcase RecordOpType.Put:\n\t\t\t\t\tchanges.diffs.diff.puts[id] = op[1]\n\t\t\t\t\tbreak\n\t\t\t\tcase RecordOpType.Patch:\n\t\t\t\t\tassert(before && after, 'before and after are required for patches')\n\t\t\t\t\tchanges.diffs.diff.puts[id] = [before, after]\n\t\t\t\t\tbreak\n\t\t\t\tcase RecordOpType.Remove:\n\t\t\t\t\tchanges.diffs.diff.deletes.push(id)\n\t\t\t\t\tbreak\n\t\t\t\tdefault:\n\t\t\t\t\texhaustiveSwitchError(op[0])\n\t\t\t}\n\t\t}\n\n\t\tconst addDocument = (\n\t\t\tstorage: MinimalDocStore<R>,\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\t_state: R,\n\t\t\tauthorize?: (prev: R | null, next: R) => R | null\n\t\t): Result<void, void> => {\n\t\t\tconst res = session\n\t\t\t\t? this.schema.migratePersistedRecord(_state, session.serializedSchema, 'up')\n\t\t\t\t: { type: 'success' as const, value: _state }\n\t\t\tif (res.type === 'error') {\n\t\t\t\tthrow new TLSyncError(res.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t}\n\t\t\tlet { value: state } = res\n\n\t\t\t// Get the existing document, if any\n\t\t\tconst doc = storage.get(id) as R | undefined\n\n\t\t\t// Authorize on the up-migrated record; on create the authorizer's return is stored as-is,\n\t\t\t// so no later migration can clobber stamped fields.\n\t\t\tif (authorize) {\n\t\t\t\tconst result = authorize(doc ?? null, state)\n\t\t\t\tif (!result) return Result.ok(undefined) // vetoed: skip the op, the client self-corrects\n\t\t\t\tif (!doc) state = result // create: store the authorizer's (stamped) record\n\t\t\t}\n\n\t\t\tif (doc) {\n\t\t\t\t// If there's an existing document, replace it with the new state\n\t\t\t\t// but propagate a diff rather than the entire value\n\t\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, doc.typeName))\n\t\t\t\tconst diff = diffAndValidateRecord(doc, state, recordType)\n\t\t\t\tif (diff) {\n\t\t\t\t\tstorage.set(id, state)\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff], doc, state)\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Otherwise, if we don't already have a document with this id\n\t\t\t\t// create the document and propagate the put op\n\t\t\t\t// set automatically clears tombstones if they exist\n\t\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, state.typeName))\n\t\t\t\tvalidateRecord(state, recordType)\n\t\t\t\tstorage.set(id, state)\n\t\t\t\tpropagateOp(changes, id, [RecordOpType.Put, state], undefined, undefined)\n\t\t\t}\n\n\t\t\treturn Result.ok(undefined)\n\t\t}\n\n\t\tconst patchDocument = (\n\t\t\tstorage: MinimalDocStore<R>,\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\tpatch: ObjectDiff,\n\t\t\tauthorize?: (prev: R, next: R) => R | null\n\t\t) => {\n\t\t\t// if it was already deleted, there's no need to apply the patch\n\t\t\tconst doc = storage.get(id) as R | undefined\n\t\t\tif (!doc) return\n\n\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, doc.typeName))\n\t\t\t// If the client's version of the record is older than ours,\n\t\t\t// we apply the patch to the downgraded version of the record\n\t\t\tconst downgraded = session\n\t\t\t\t? this.schema.migratePersistedRecord(doc, session.serializedSchema, 'down')\n\t\t\t\t: { type: 'success' as const, value: doc }\n\t\t\tif (downgraded.type === 'error') {\n\t\t\t\tthrow new TLSyncError(downgraded.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t}\n\n\t\t\tif (downgraded.value === doc) {\n\t\t\t\t// If the versions are compatible, apply the patch and propagate the patch op\n\t\t\t\tconst diff = applyAndDiffRecord(doc, patch, recordType, legacyAppendMode)\n\t\t\t\tif (diff) {\n\t\t\t\t\t// Authorize on the committed candidate \u2014 the record that will actually be stored.\n\t\t\t\t\tif (authorize && !authorize(doc, diff[1])) return\n\t\t\t\t\tstorage.set(id, diff[1])\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff[0]], doc, diff[1])\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// need to apply the patch to the downgraded version and then upgrade it\n\n\t\t\t\t// apply the patch to the downgraded version\n\t\t\t\tconst patched = applyObjectDiff(downgraded.value, patch)\n\t\t\t\t// then upgrade the patched version and use that as the new state\n\t\t\t\tconst upgraded = session\n\t\t\t\t\t? this.schema.migratePersistedRecord(patched, session.serializedSchema, 'up')\n\t\t\t\t\t: { type: 'success' as const, value: patched }\n\t\t\t\t// If the client's version is too old, we'll hit an error\n\t\t\t\tif (upgraded.type === 'error') {\n\t\t\t\t\tthrow new TLSyncError(upgraded.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t}\n\t\t\t\t// replace the state with the upgraded version and propagate the patch op\n\t\t\t\tconst diff = diffAndValidateRecord(doc, upgraded.value, recordType, legacyAppendMode)\n\t\t\t\tif (diff) {\n\t\t\t\t\t// Authorize on the committed candidate \u2014 the upgraded record, not a raw preview.\n\t\t\t\t\tif (authorize && !authorize(doc, upgraded.value)) return\n\t\t\t\t\tstorage.set(id, upgraded.value)\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff], doc, upgraded.value)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst { result, documentClock, changes } = this.storage.transaction(\n\t\t\t(txn) => {\n\t\t\t\tthis.broadcastChanges(txn)\n\t\t\t\t// collect actual ops that resulted from the push\n\t\t\t\t// these will be broadcast to other users\n\n\t\t\t\tconst docChanges: ActualChanges = { diffs: null }\n\t\t\t\tconst presenceChanges: ActualChanges = { diffs: null }\n\n\t\t\t\tif (this.presenceType && session?.presenceId && 'presence' in message && message.presence) {\n\t\t\t\t\tif (!session) throw new Error('session is required for presence pushes')\n\t\t\t\t\t// The push request was for the presence scope.\n\t\t\t\t\tconst id = session.presenceId\n\t\t\t\t\tconst [type, val] = message.presence\n\t\t\t\t\tconst { typeName } = this.presenceType\n\t\t\t\t\tswitch (type) {\n\t\t\t\t\t\tcase RecordOpType.Put: {\n\t\t\t\t\t\t\t// Try to put the document. If it fails, stop here.\n\t\t\t\t\t\t\taddDocument(this.presenceStore, presenceChanges, id, {\n\t\t\t\t\t\t\t\t...val,\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\ttypeName,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t}\n\t\t\t\t\t\tcase RecordOpType.Patch: {\n\t\t\t\t\t\t\t// Try to patch the document. If it fails, stop here.\n\t\t\t\t\t\t\tpatchDocument(this.presenceStore, presenceChanges, id, {\n\t\t\t\t\t\t\t\t...val,\n\t\t\t\t\t\t\t\tid: [ValueOpType.Put, id],\n\t\t\t\t\t\t\t\ttypeName: [ValueOpType.Put, typeName],\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\t// Per-op write gate: document-lane records are gated by `isReadonly`, object-lane\n\t\t\t\t// records by `objectAccess`. Denied ops are skipped (the client is corrected by the\n\t\t\t\t// resulting discard/rebase push_result, exactly as whole-diff readonly skips were).\n\t\t\t\t// Server-initiated pushes (no session) are always allowed.\n\t\t\t\tconst canWrite = (typeName: string) =>\n\t\t\t\t\t!session ||\n\t\t\t\t\t(this.objectTypes.has(typeName) ? session.objectAccess !== 'read' : !session.isReadonly)\n\n\t\t\t\tif (message.diff) {\n\t\t\t\t\t// The push request was for the document scope.\n\t\t\t\t\tfor (const [id, op] of objectMapEntriesIterable(message.diff!)) {\n\t\t\t\t\t\tswitch (op[0]) {\n\t\t\t\t\t\t\tcase RecordOpType.Put: {\n\t\t\t\t\t\t\t\t// The write gate is checked before type validation so that a denied\n\t\t\t\t\t\t\t\t// session's ops are skipped without rejection, matching the previous\n\t\t\t\t\t\t\t\t// whole-diff readonly behavior.\n\t\t\t\t\t\t\t\tif (!canWrite(op[1].typeName)) continue\n\t\t\t\t\t\t\t\t// Try to add the document.\n\t\t\t\t\t\t\t\t// If we're putting a record with a type that we don't recognize, fail\n\t\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\t\t!this.documentTypes.has(op[1].typeName) &&\n\t\t\t\t\t\t\t\t\t!this.objectTypes.has(op[1].typeName)\n\t\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\t\tthrow new TLSyncError(\n\t\t\t\t\t\t\t\t\t\t'invalid record',\n\t\t\t\t\t\t\t\t\t\tTLSyncErrorCloseEventReason.INVALID_RECORD\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tconst record = op[1]\n\t\t\t\t\t\t\t\t// Per-type authorizer: stamp/veto the write from the session's identity.\n\t\t\t\t\t\t\t\t// Client pushes only; runs inside `addDocument`, on the up-migrated record.\n\t\t\t\t\t\t\t\tlet authorize: ((prev: R | null, next: R) => R | null) | undefined\n\t\t\t\t\t\t\t\tif (session && this.authorizeRecord) {\n\t\t\t\t\t\t\t\t\tconst prev = (txn.get(id) as R | undefined) ?? null\n\t\t\t\t\t\t\t\t\t// A put must not change the record's typeName: the authorizer lookup keys\n\t\t\t\t\t\t\t\t\t// off the incoming typeName while the replace path validates against the\n\t\t\t\t\t\t\t\t\t// stored one, so a swap would consult the wrong authorizer (or none).\n\t\t\t\t\t\t\t\t\t// Skip it like a veto; the client self-corrects.\n\t\t\t\t\t\t\t\t\tif (prev && prev.typeName !== record.typeName) {\n\t\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t\t'skipping put that changes typeName',\n\t\t\t\t\t\t\t\t\t\t\t`${prev.typeName} -> ${record.typeName}`,\n\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\tconst authorizePut = this.authorizerFor(record.typeName)\n\t\t\t\t\t\t\t\t\tif (authorizePut) {\n\t\t\t\t\t\t\t\t\t\tauthorize = (prevRec, next) => {\n\t\t\t\t\t\t\t\t\t\t\tconst result = authorizePut(\n\t\t\t\t\t\t\t\t\t\t\t\tprevRec\n\t\t\t\t\t\t\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsession: { sessionId: session.sessionId, meta: session.meta },\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: 'update',\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tprev: prevRec,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsession: { sessionId: session.sessionId, meta: session.meta },\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: 'create',\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tprev: null,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\tif (!result) {\n\t\t\t\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t\t\t\t'authorizer vetoed put',\n\t\t\t\t\t\t\t\t\t\t\t\t\trecord.typeName,\n\t\t\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\t\treturn null\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t// create: store the stamped record; update: allow/veto only\n\t\t\t\t\t\t\t\t\t\t\treturn prevRec ? next : result\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\taddDocument(txn, docChanges, id, record, authorize)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcase RecordOpType.Patch: {\n\t\t\t\t\t\t\t\tconst doc = txn.get(id) as R | undefined\n\t\t\t\t\t\t\t\t// if it was already deleted, there's no need to apply the patch\n\t\t\t\t\t\t\t\tif (!doc) continue\n\t\t\t\t\t\t\t\tif (!canWrite(doc.typeName)) continue\n\t\t\t\t\t\t\t\t// Per-type authorizer (update, allow/veto only): runs inside `patchDocument`\n\t\t\t\t\t\t\t\t// on the committed candidate, never on a raw client-version preview.\n\t\t\t\t\t\t\t\tconst authorizePatch = session && this.authorizerFor(doc.typeName)\n\t\t\t\t\t\t\t\tconst authorize = authorizePatch\n\t\t\t\t\t\t\t\t\t? (prev: R, next: R) => {\n\t\t\t\t\t\t\t\t\t\t\tconst result = authorizePatch({\n\t\t\t\t\t\t\t\t\t\t\t\tsession: { sessionId: session.sessionId, meta: session.meta },\n\t\t\t\t\t\t\t\t\t\t\t\ttype: 'update',\n\t\t\t\t\t\t\t\t\t\t\t\tprev,\n\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t\t\t\tif (!result) {\n\t\t\t\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t\t\t\t'authorizer vetoed patch',\n\t\t\t\t\t\t\t\t\t\t\t\t\tdoc.typeName,\n\t\t\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\treturn result\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t: undefined\n\t\t\t\t\t\t\t\t// Try to patch the document. If it fails, stop here.\n\t\t\t\t\t\t\t\tpatchDocument(txn, docChanges, id, op[1], authorize)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcase RecordOpType.Remove: {\n\t\t\t\t\t\t\t\tconst doc = txn.get(id) as R | undefined\n\t\t\t\t\t\t\t\tif (!doc) {\n\t\t\t\t\t\t\t\t\t// If the doc was already deleted, don't do anything, no need to propagate a delete op\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tif (!canWrite(doc.typeName)) continue\n\t\t\t\t\t\t\t\t// Per-type authorizer (delete): veto deletes the session isn't allowed to make,\n\t\t\t\t\t\t\t\t// e.g. deleting someone else's comment. Allow/veto only.\n\t\t\t\t\t\t\t\tconst authorizeRemove = session && this.authorizerFor(doc.typeName)\n\t\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\t\tauthorizeRemove &&\n\t\t\t\t\t\t\t\t\t!authorizeRemove({\n\t\t\t\t\t\t\t\t\t\tsession: { sessionId: session.sessionId, meta: session.meta },\n\t\t\t\t\t\t\t\t\t\ttype: 'delete',\n\t\t\t\t\t\t\t\t\t\tprev: doc,\n\t\t\t\t\t\t\t\t\t\tnext: null,\n\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t'authorizer vetoed delete',\n\t\t\t\t\t\t\t\t\t\tdoc.typeName,\n\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t\t// Delete the document and propagate the delete op\n\t\t\t\t\t\t\t\t// delete automatically creates tombstones\n\t\t\t\t\t\t\t\ttxn.delete(id)\n\t\t\t\t\t\t\t\tpropagateOp(docChanges, id, op, doc, undefined)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\treturn { docChanges, presenceChanges }\n\t\t\t},\n\t\t\t{ id: this.internalTxnId, emitChanges: 'when-different' }\n\t\t)\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tlet pushResult: TLSocketServerSentEvent<R> | undefined\n\t\tif (changes && session) {\n\t\t\t// txn did not apply verbatim so we should broadcast the actual changes\n\t\t\tresult.docChanges.diffs = { networkDiff: toNetworkDiff(changes) ?? {}, diff: changes }\n\t\t}\n\n\t\tif (isEqual(result.docChanges.diffs?.networkDiff, message.diff)) {\n\t\t\tpushResult = {\n\t\t\t\ttype: 'push_result',\n\t\t\t\tclientClock: message.clientClock,\n\t\t\t\tserverClock: documentClock,\n\t\t\t\taction: 'commit',\n\t\t\t}\n\t\t} else if (!result.docChanges.diffs?.networkDiff) {\n\t\t\tpushResult = {\n\t\t\t\ttype: 'push_result',\n\t\t\t\tclientClock: message.clientClock,\n\t\t\t\tserverClock: documentClock,\n\t\t\t\taction: 'discard',\n\t\t\t}\n\t\t} else if (session) {\n\t\t\t// if recordsDiff is null but diff is not, then there are no clients that need down migrations\n\t\t\t// so we can just use the diff directly\n\t\t\tconst diff = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsession.serializedSchema,\n\t\t\t\tsession.requiresDownMigrations,\n\t\t\t\tresult.docChanges.diffs.diff,\n\t\t\t\tresult.docChanges.diffs.networkDiff\n\t\t\t)\n\t\t\tif (diff.ok) {\n\t\t\t\tpushResult = {\n\t\t\t\t\ttype: 'push_result',\n\t\t\t\t\tclientClock: message.clientClock,\n\t\t\t\t\tserverClock: documentClock,\n\t\t\t\t\taction: { rebaseWithDiff: diff.value },\n\t\t\t\t}\n\t\t\t}\n\t\t\t// if the difff was not ok then the session was rejected and it's ok to continue without a push result\n\t\t}\n\n\t\tif (session && pushResult) {\n\t\t\tthis._unsafe_sendMessage(session.sessionId, pushResult)\n\t\t}\n\t\tif (result.docChanges.diffs || result.presenceChanges.diffs) {\n\t\t\tthis.broadcastPatch(\n\t\t\t\t{\n\t\t\t\t\tputs: {\n\t\t\t\t\t\t...result.docChanges.diffs?.diff.puts,\n\t\t\t\t\t\t...result.presenceChanges.diffs?.diff.puts,\n\t\t\t\t\t},\n\t\t\t\t\tdeletes: [\n\t\t\t\t\t\t...(result.docChanges.diffs?.diff.deletes ?? []),\n\t\t\t\t\t\t...(result.presenceChanges.diffs?.diff.deletes ?? []),\n\t\t\t\t\t],\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\t...result.docChanges.diffs?.networkDiff,\n\t\t\t\t\t...result.presenceChanges.diffs?.networkDiff,\n\t\t\t\t},\n\t\t\t\tsession?.sessionId\n\t\t\t)\n\t\t}\n\n\t\tif (result.presenceChanges.diffs) {\n\t\t\tqueueMicrotask(() => {\n\t\t\t\tthis.onPresenceChange?.()\n\t\t\t})\n\t\t}\n\n\t\tif (result.docChanges.diffs && this.onCommittedChanges) {\n\t\t\tconst diff = result.docChanges.diffs.diff\n\t\t\tqueueMicrotask(() => {\n\t\t\t\ttry {\n\t\t\t\t\tthis.onCommittedChanges?.({ diff, documentClock })\n\t\t\t\t} catch (e) {\n\t\t\t\t\tthis.log?.error?.('onCommittedChanges threw', e)\n\t\t\t\t}\n\t\t\t})\n\t\t}\n\t}\n\n\t/**\n\t * Handle the event when a client disconnects. Cleans up the session and\n\t * removes any presence information.\n\t *\n\t * @param sessionId - The session that disconnected\n\t * @example\n\t * ```ts\n\t * websocket.onClose(() => {\n\t *   room.handleClose(sessionId)\n\t * })\n\t * ```\n\t */\n\thandleClose(sessionId: string) {\n\t\tthis.cancelSession(sessionId)\n\t}\n}\n\n/** @internal */\nexport interface MinimalDocStore<R extends UnknownRecord> {\n\tget(id: string): UnknownRecord | undefined\n\tset(id: string, record: R): void\n\tdelete(id: string): void\n}\n\n/** @internal */\nexport class PresenceStore<R extends UnknownRecord> implements MinimalDocStore<R> {\n\tprivate readonly presences = new AtomMap<string, R>('presences')\n\n\tget(id: string): UnknownRecord | undefined {\n\t\treturn this.presences.get(id)\n\t}\n\n\tset(id: string, state: R): void {\n\t\tthis.presences.set(id, state)\n\t}\n\n\tdelete(id: string): void {\n\t\tthis.presences.delete(id)\n\t}\n\n\tvalues() {\n\t\treturn this.presences.values()\n\t}\n}\n"],
-  "mappings": "AAAA;AAAA,EACC;AAAA,OAMM;AACP;AAAA,EACC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACM;AACP,SAAS,wBAAwB;AACjC;AAAA,EACC;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,OACM;AACP,SAAS,gBAAgB;AACzB;AAAA,EACC;AAAA,EACA;AAAA,OAKM;AACP,SAAS,oBAAoB,uBAAuB,sBAAsB;AAC1E;AAAA,EAEC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACM;AAEP,SAAS,aAAa,2BAA2B,mCAAmC;AACpF;AAAA,EAIC;AAAA,OACM;AAiCA,MAAM,iCAAiC,MAAO;AAErD,MAAM,YAAY,CAAC,SAAiB,KAAK,IAAI,IAAI;AAyH1C,MAAM,WAAiD;AAAA;AAAA,EAEpD,WAAW,oBAAI,IAAyC;AAAA,EAEzD,oBAAoB;AAAA,EAEpB,aAAmD;AAAA,EAE3D,gBAAgB,SAAS,MAAM;AAC9B,QAAI,KAAK,YAAY;AACpB,mBAAa,KAAK,UAAU;AAC5B,WAAK,aAAa;AAAA,IACnB;AACA,eAAW,UAAU,KAAK,SAAS,OAAO,GAAG;AAC5C,cAAQ,OAAO,OAAO;AAAA,QACrB,KAAK,iBAAiB,WAAW;AAChC,gBAAM,cAAc,UAAU,OAAO,mBAAmB,IAAI,KAAK;AACjE,cAAI,eAAe,CAAC,OAAO,OAAO,QAAQ;AACzC,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC;AACA;AAAA,QACD;AAAA,QACA,KAAK,iBAAiB,wBAAwB;AAC7C,gBAAM,cAAc,UAAU,OAAO,gBAAgB,IAAI;AACzD,cAAI,eAAe,CAAC,OAAO,OAAO,QAAQ;AAEzC,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC,OAAO;AACN,iBAAK,sBAAsB;AAAA,UAC5B;AACA;AAAA,QACD;AAAA,QACA,KAAK,iBAAiB,iBAAiB;AACtC,gBAAM,cAAc,UAAU,OAAO,gBAAgB,IAAI;AACzD,cAAI,aAAa;AAChB,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC,OAAO;AACN,iBAAK,sBAAsB;AAAA,UAC5B;AACA;AAAA,QACD;AAAA,QACA,SAAS;AACR,gCAAsB,MAAM;AAAA,QAC7B;AAAA,MACD;AAAA,IACD;AAAA,EACD,GAAG,GAAI;AAAA,EAEC,wBAAwB;AAC/B,QAAI,KAAK,WAAY;AACrB,SAAK,aAAa,WAAW,KAAK,eAAe,4BAA4B,GAAG;AAAA,EACjF;AAAA,EAES,gBAAgB,IAAI,cAAiB;AAAA,EAEtC,cAAiC,CAAC;AAAA,EAElC,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,QAAQ;AACP,SAAK,YAAY,QAAQ,CAAC,MAAM,EAAE,CAAC;AACnC,SAAK,SAAS,QAAQ,CAAC,YAAY;AAClC,cAAQ,OAAO,MAAM;AAAA,IACtB,CAAC;AACD,SAAK,YAAY;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW;AACV,WAAO,KAAK;AAAA,EACb;AAAA,EAES,SAAS,iBAGf;AAAA;AAAA,EAGc;AAAA,EAER;AAAA,EAEA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EACA;AAAA,EACD;AAAA,EACQ;AAAA,EAGC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQT,cAAc,UAAyE;AAC9F,UAAM,YAAY,KAAK,kBAAkB,QAAQ;AAGjD,QAAI,CAAC,UAAW,QAAO;AAIvB,WAAO,CAAC,SAAS;AAChB,UAAI;AACH,eAAO,UAAU,IAAI;AAAA,MACtB,SAAS,GAAG;AACX,aAAK,KAAK,QAAQ,gDAAgD,CAAC;AACnE,eAAO;AAAA,MACR;AAAA,IACD;AAAA,EACD;AAAA,EAEA,YAAY,MAwBT;AACF,SAAK,SAAS,KAAK;AACnB,SAAK,MAAM,KAAK;AAChB,SAAK,mBAAmB,KAAK;AAC7B,SAAK,qBAAqB,KAAK;AAC/B,SAAK,kBAAkB,KAAK;AAC5B,SAAK,UAAU,KAAK;AACpB,SAAK,qBAAqB,KAAK,iBAAiB;AAEhD;AAAA,MACC;AAAA,MACA;AAAA,IAED;AAGA,SAAK,mBAAmB,KAAK,MAAM,KAAK,UAAU,KAAK,OAAO,UAAU,CAAC,CAAC;AAE1E,SAAK,cAAc,IAAI,IAAI,KAAK,eAAe,CAAC,CAAC;AACjD,eAAW,YAAY,KAAK,aAAa;AACxC,YAAM,OAAO,eAAe,KAAK,OAAO,OAAO,QAAQ;AACvD,aAAO,MAAM,4BAA4B,QAAQ,mCAAmC;AACpF;AAAA,QACC,KAAK,UAAU;AAAA,QACf,4BAA4B,QAAQ,sCAAsC,KAAK,KAAK;AAAA,MACrF;AAAA,IACD;AAGA,SAAK,gBAAgB,IAAI;AAAA,MACxB,OAAO,OAA2B,KAAK,OAAO,KAAK,EACjD,OAAO,CAAC,MAAM,EAAE,UAAU,cAAc,CAAC,KAAK,YAAY,IAAI,EAAE,QAAQ,CAAC,EACzE,IAAI,CAAC,MAAM,EAAE,QAAQ;AAAA,IACxB;AAEA,UAAM,gBAAgB,IAAI;AAAA,MACzB,OAAO,OAA2B,KAAK,OAAO,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,UAAU;AAAA,IAC1F;AAEA,QAAI,cAAc,OAAO,GAAG;AAC3B,YAAM,IAAI;AAAA,QACT,wEAAwE,cAAc,IAAI;AAAA,MAC3F;AAAA,IACD;AAEA,SAAK,eAAe,cAAc,OAAO,EAAE,KAAK,GAAG,SAAS;AAI5D,QAAI,KAAK,gBAAgB,KAAK,iBAAiB;AAC9C;AAAA,QACC,CAAC,eAAe,KAAK,iBAAiB,KAAK,aAAa,QAAQ;AAAA,QAChE,gCAAgC,KAAK,aAAa,QAAQ;AAAA,MAC3D;AAAA,IACD;AAEA,UAAM,EAAE,cAAc,IAAI,KAAK,QAAQ,YAAY,CAAC,QAAQ;AAC3D,WAAK,OAAO,eAAe,GAAG;AAAA,IAC/B,CAAC;AAED,SAAK,oBAAoB;AAEzB,SAAK,YAAY;AAAA,MAChB,KAAK,QAAQ,SAAS,CAAC,EAAE,GAAG,MAAM;AACjC,YAAI,OAAO,KAAK,eAAe;AAC9B,eAAK,gCAAgC;AAAA,QACtC;AAAA,MACD,CAAC;AAAA,IACF;AAEA,SAAK,YAAY,KAAK,MAAM;AAC3B,WAAK,cAAc,OAAO;AAC1B,UAAI,KAAK,YAAY;AACpB,qBAAa,KAAK,UAAU;AAC5B,aAAK,aAAa;AAAA,MACnB;AAAA,IACD,CAAC;AAOD,QAAI,OAAO,SAAS,KAAK,kBAAkB,KAAK,KAAK,qBAAqB,GAAG;AAC5E,YAAM,kBAAkB,KAAK,IAAI,KAAM,KAAK,MAAM,KAAK,qBAAqB,CAAC,CAAC;AAC9E,WAAK,YAAY,KAAK,SAAS,MAAM,KAAK,cAAc,GAAG,eAAe,CAAC;AAAA,IAC5E;AAAA,EACD;AAAA,EACQ,kCAAkC;AACzC,SAAK,QAAQ,YAAY,CAAC,QAAQ;AACjC,WAAK,iBAAiB,GAAG;AACzB,WAAK,oBAAoB,IAAI,SAAS;AAAA,IACvC,CAAC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,oBACP,WACA,SACC;AACD,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,4CAA4C,QAAQ,IAAI;AACzE;AAAA,IACD;AACA,QAAI,QAAQ,UAAU,iBAAiB,WAAW;AACjD,WAAK,KAAK,OAAO,gDAAgD,QAAQ,IAAI;AAC7E;AAAA,IACD;AACA,QAAI,QAAQ,OAAO,QAAQ;AAC1B,UAAI,QAAQ,SAAS,WAAW,QAAQ,SAAS,eAAe;AAE/D,YAAI,QAAQ,SAAS,QAAQ;AAG5B,eAAK,mBAAmB,SAAS;AAAA,QAClC;AACA,gBAAQ,OAAO,YAAY,OAAO;AAAA,MACnC,OAAO;AACN,YAAI,QAAQ,kBAAkB,MAAM;AAEnC,kBAAQ,OAAO,YAAY,EAAE,MAAM,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;AAE5D,kBAAQ,gBAAgB;AAAA,YACvB,MAAM,KAAK,mBAAmB,SAAS;AAAA,YACvC;AAAA,UACD;AAAA,QACD,OAAO;AACN,kBAAQ,wBAAwB,KAAK,OAAO;AAAA,QAC7C;AAAA,MACD;AAAA,IACD,OAAO;AACN,WAAK,cAAc,QAAQ,SAAS;AAAA,IACrC;AAAA,EACD;AAAA;AAAA;AAAA,EAIA,mBAAmB,WAAmB;AACrC,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAE3C,QAAI,CAAC,WAAW,QAAQ,UAAU,iBAAiB,WAAW;AAC7D;AAAA,IACD;AAEA,YAAQ,gBAAgB;AAExB,QAAI,QAAQ,wBAAwB,SAAS,GAAG;AAG/C,YAAM,OAAO,QAAQ;AACrB,cAAQ,0BAA0B,CAAC;AACnC,cAAQ,OAAO,YAAY,EAAE,MAAM,QAAQ,KAAK,CAAC;AAAA,IAClD;AAAA,EACD;AAAA;AAAA,EAGQ,cAAc,WAAmB,aAAsB;AAC9D,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,iCAAiC;AAClD;AAAA,IACD;AAEA,SAAK,SAAS,OAAO,SAAS;AAE9B,QAAI;AACH,UAAI,aAAa;AAChB,gBAAQ,OAAO,MAAM,2BAA2B,WAAW;AAAA,MAC5D,OAAO;AACN,gBAAQ,OAAO,MAAM;AAAA,MACtB;AAAA,IACD,QAAQ;AAAA,IAER;AAEA,UAAM,WAAW,KAAK,cAAc,IAAI,QAAQ,cAAc,EAAE;AAChE,QAAI,UAAU;AACb,WAAK,cAAc,OAAO,QAAQ,UAAW;AAE7C,WAAK,eAAe;AAAA,QACnB,MAAM,CAAC;AAAA,QACP,SAAS,CAAC,QAAQ,UAAW;AAAA,MAC9B,CAAC;AAAA,IACF;AAEA,SAAK,OAAO,KAAK,mBAAmB,EAAE,WAAW,MAAM,QAAQ,KAAK,CAAC;AACrE,QAAI,KAAK,SAAS,SAAS,GAAG;AAC7B,WAAK,OAAO,KAAK,mBAAmB;AAAA,IACrC;AAAA,EACD;AAAA,EAEQ,cAAc,WAAmB;AACxC,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb;AAAA,IACD;AAEA,QAAI,QAAQ,UAAU,iBAAiB,iBAAiB;AACvD,WAAK,KAAK,OAAO,0DAA0D;AAC3E;AAAA,IACD;AAEA,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,iBAAiB;AAAA,MACxB;AAAA,MACA,YAAY,QAAQ;AAAA,MACpB,QAAQ,QAAQ;AAAA,MAChB,kBAAkB,KAAK,IAAI;AAAA,MAC3B,MAAM,QAAQ;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,yBAAyB,QAAQ;AAAA,MACjC,sBAAsB,QAAQ;AAAA,IAC/B,CAAC;AAED,QAAI;AACH,cAAQ,OAAO,MAAM;AAAA,IACtB,QAAQ;AAAA,IAER;AAEA,SAAK,sBAAsB;AAAA,EAC5B;AAAA,EAES,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUjB,eACP,MACA,aACA,iBACC;AAED,UAAM,aAAa,eAAe,cAAc,IAAI;AACpD,QAAI,CAAC,WAAY,QAAO;AAExB,SAAK,SAAS,QAAQ,CAAC,YAAY;AAClC,UAAI,QAAQ,UAAU,iBAAiB,UAAW;AAClD,UAAI,oBAAoB,QAAQ,UAAW;AAC3C,UAAI,CAAC,QAAQ,OAAO,QAAQ;AAC3B,aAAK,cAAc,QAAQ,SAAS;AACpC;AAAA,MACD;AAEA,YAAM,aAAa,KAAK;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR;AAAA,MACD;AACA,UAAI,CAAC,WAAW,GAAI;AAEpB,WAAK,oBAAoB,QAAQ,WAAW;AAAA,QAC3C,MAAM;AAAA,QACN,MAAM,WAAW;AAAA,QACjB,aAAa,KAAK;AAAA,MACnB,CAAC;AAAA,IACF,CAAC;AACD,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,kBAAkB,WAAmB,MAAiB;AACrD,SAAK,oBAAoB,WAAW,EAAE,MAAM,UAAU,KAAK,CAAC;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,iBAAiB,MAMd;AACF,UAAM,EAAE,WAAW,QAAQ,MAAM,YAAY,aAAa,IAAI;AAC9D,UAAM,WAAW,KAAK,SAAS,IAAI,SAAS;AAC5C,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,iBAAiB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,YAAY,UAAU,cAAc,KAAK,cAAc,SAAS,KAAK;AAAA,MACrE,kBAAkB,KAAK,IAAI;AAAA,MAC3B;AAAA,MACA,YAAY,cAAc;AAAA,MAC1B,cAAc,gBAAgB;AAAA;AAAA,MAE9B,yBAAyB;AAAA,MACzB,sBAAsB;AAAA,IACvB,CAAC;AACD,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,qBAAqB,MAWlB;AACF,UAAM;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACD,IAAI;AAEJ,UAAM,aAAa,KAAK,OAAO,mBAAmB,gBAAgB;AAClE,UAAM,yBAAyB,WAAW,KAAK,WAAW,MAAM,SAAS,IAAI;AAE7E,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,iBAAiB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,YAAY,cAAc,KAAK,cAAc,SAAS,KAAK;AAAA,MAC3D;AAAA,MACA;AAAA,MACA,qBAAqB,KAAK,IAAI;AAAA,MAC9B,eAAe;AAAA,MACf,yBAAyB,CAAC;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,cAAc,gBAAgB;AAAA,MAC9B;AAAA,MACA;AAAA,IACD,CAAC;AAED,QAAI,kBAAkB,YAAY;AACjC,WAAK,cAAc,IAAI,YAAY,cAAmB;AAAA,IACvD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,yBAAkC;AACjC,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC7C,UAAI,QAAQ,UAAU,iBAAiB,WAAW;AACjD,YAAI,CAAC,QAAQ,sBAAsB;AAClC,iBAAO;AAAA,QACR;AAAA,MACD;AAAA,IACD;AACA,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBQ,2BACP,WACA,kBACA,wBACA,MACA,YACiD;AACjD,QAAI,CAAC,wBAAwB;AAC5B,aAAO,OAAO,GAAG,cAAc,cAAc,IAAI,KAAK,CAAC,CAAC;AAAA,IACzD;AAEA,UAAM,SAAyB,CAAC;AAGhC,eAAW,CAAC,IAAI,GAAG,KAAK,yBAAyB,KAAK,IAAI,GAAG;AAC5D,UAAI,MAAM,QAAQ,GAAG,GAAG;AAEvB,cAAM,CAAC,MAAM,EAAE,IAAI;AACnB,cAAM,aAAa,KAAK,OAAO,uBAAuB,MAAM,kBAAkB,MAAM;AACpF,YAAI,WAAW,SAAS,SAAS;AAChC,eAAK,cAAc,WAAW,4BAA4B,cAAc;AACxE,iBAAO,OAAO,IAAI,WAAW,MAAM;AAAA,QACpC;AACA,cAAM,WAAW,KAAK,OAAO,uBAAuB,IAAI,kBAAkB,MAAM;AAChF,YAAI,SAAS,SAAS,SAAS;AAC9B,eAAK,cAAc,WAAW,4BAA4B,cAAc;AACxE,iBAAO,OAAO,IAAI,SAAS,MAAM;AAAA,QAClC;AACA,cAAM,QAAQ,WAAW,WAAW,OAAO,SAAS,KAAK;AACzD,YAAI,OAAO;AACV,iBAAO,EAAE,IAAI,CAAC,aAAa,OAAO,KAAK;AAAA,QACxC;AAAA,MACD,OAAO;AAEN,cAAM,kBAAkB,KAAK,OAAO,uBAAuB,KAAK,kBAAkB,MAAM;AACxF,YAAI,gBAAgB,SAAS,SAAS;AACrC,eAAK,cAAc,WAAW,4BAA4B,cAAc;AACxE,iBAAO,OAAO,IAAI,gBAAgB,MAAM;AAAA,QACzC;AACA,eAAO,EAAE,IAAI,CAAC,aAAa,KAAK,gBAAgB,KAAK;AAAA,MACtD;AAAA,IACD;AAGA,eAAW,MAAM,KAAK,SAAS;AAC9B,aAAO,EAAE,IAAI,CAAC,aAAa,MAAM;AAAA,IAClC;AAEA,WAAO,OAAO,GAAG,MAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,cAAc,WAAmB,SAAqC;AAC3E,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,uCAAuC;AACxD;AAAA,IACD;AACA,QAAI;AACH,cAAQ,QAAQ,MAAM;AAAA,QACrB,KAAK,WAAW;AACf,iBAAO,KAAK,qBAAqB,SAAS,OAAO;AAAA,QAClD;AAAA,QACA,KAAK,QAAQ;AACZ,iBAAO,KAAK,kBAAkB,SAAS,OAAO;AAAA,QAC/C;AAAA,QACA,KAAK,QAAQ;AACZ,cAAI,QAAQ,UAAU,iBAAiB,WAAW;AACjD,oBAAQ,sBAAsB,KAAK,IAAI;AAAA,UACxC;AACA,iBAAO,KAAK,oBAAoB,QAAQ,WAAW,EAAE,MAAM,OAAO,CAAC;AAAA,QACpE;AAAA,QACA,SAAS;AACR,gCAAsB,OAAO;AAAA,QAC9B;AAAA,MACD;AAAA,IACD,SAAS,GAAG;AACX,UAAI,aAAa,aAAa;AAC7B,aAAK,cAAc,QAAQ,WAAW,EAAE,MAAM;AAAA,MAC/C,OAAO;AAEN,cAAM;AAAA,MACP;AAAA,IACD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,cAAc,WAAmB,aAAoD;AACpF,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,QAAS;AACd,QAAI,CAAC,aAAa;AACjB,WAAK,cAAc,SAAS;AAC5B;AAAA,IACD;AACA,QAAI,QAAQ,yBAAyB;AACpC,UAAI;AACH,YAAI,QAAQ,OAAO,QAAQ;AAE1B,cAAI;AACJ,kBAAQ,aAAa;AAAA,YACpB,KAAK,4BAA4B;AAEhC,6BAAe,wBAAwB;AACvC;AAAA,YACD,KAAK,4BAA4B;AAEhC,6BAAe,wBAAwB;AACvC;AAAA,YACD,KAAK,4BAA4B;AAEhC,6BAAe,wBAAwB;AACvC;AAAA,YACD;AAEC,6BAAe,wBAAwB;AACvC;AAAA,UACF;AACA,kBAAQ,OAAO,YAAY;AAAA,YAC1B,MAAM;AAAA,YACN,QAAQ;AAAA,UACT,CAAC;AAAA,QACF;AAAA,MACD,QAAQ;AAAA,MAER,UAAE;AACD,aAAK,cAAc,SAAS;AAAA,MAC7B;AAAA,IACD,OAAO;AACN,WAAK,cAAc,WAAW,WAAW;AAAA,IAC1C;AAAA,EACD;AAAA,EAEQ,oBAAoB;AAC3B,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC7C,WAAK,cAAc,QAAQ,SAAS;AAAA,IACrC;AAAA,EACD;AAAA,EAEQ,iBAAiB,KAAkC;AAC1D,UAAM,UAAU,IAAI,gBAAgB,KAAK,iBAAiB;AAC1D,QAAI,CAAC,QAAS;AACd,UAAM,EAAE,SAAS,KAAK,IAAI;AAC1B,SAAK,oBAAoB,IAAI,SAAS;AACtC,QAAI,SAAS;AAGZ,WAAK,kBAAkB;AACvB;AAAA,IACD;AACA,SAAK,eAAe,IAAI;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,yBAAyB,aAA+B;AAC/D,UAAM,YAAY,KAAK;AAEvB,QAAI,YAAY,gBAAgB,UAAU,eAAe;AACxD,aAAO,4BAA4B;AAAA,IACpC;AAEA,QAAI,YAAY,kBAAkB,KAAK,UAAU,kBAAkB,GAAG;AACrE,iBAAW,CAAC,YAAY,YAAY,KAAK,OAAO,QAAQ,YAAY,SAAS,GAAG;AAC/E,cAAM,aAAa,UAAU,UAAU,UAAU;AACjD,YAAI,eAAe,UAAa,eAAe,YAAY;AAC1D,iBAAO,4BAA4B;AAAA,QACpC;AAAA,MACD;AAAA,IACD;AACA,WAAO,4BAA4B;AAAA,EACpC;AAAA,EAEQ,qBACP,SACA,SACC;AAID,QAAI,uBAAuB,QAAQ;AAEnC,QAAI,yBAAyB,GAAG;AAC/B,6BAAuB;AAAA,IACxB;AAEA,YAAQ,0BAA0B,yBAAyB;AAC3D,QAAI,yBAAyB,GAAG;AAC/B;AAAA,IACD;AACA,QAAI,yBAAyB,GAAG;AAC/B;AACA,cAAQ,uBAAuB;AAAA,IAChC;AAEA,QAAI,wBAAwB,QAAQ,uBAAuB,yBAAyB,GAAG;AACtF,WAAK,cAAc,QAAQ,WAAW,4BAA4B,cAAc;AAChF;AAAA,IACD,WAAW,uBAAuB,yBAAyB,GAAG;AAC7D,WAAK,cAAc,QAAQ,WAAW,4BAA4B,cAAc;AAChF;AAAA,IACD;AAGA,QAAI,QAAQ,UAAU,MAAM;AAC3B,WAAK,cAAc,QAAQ,WAAW,4BAA4B,cAAc;AAChF;AAAA,IACD;AACA,UAAM,aAAa,KAAK,OAAO,mBAAmB,QAAQ,MAAM;AAChE,QAAI,CAAC,WAAW,IAAI;AACnB,WAAK,cAAc,QAAQ,WAAW,KAAK,yBAAyB,QAAQ,MAAM,CAAC;AACnF;AAAA,IACD;AAGA,QAAI,WAAW,MAAM,KAAK,CAAC,MAAM,EAAE,UAAU,YAAY,CAAC,EAAE,IAAI,GAAG;AAClE,WAAK,cAAc,QAAQ,WAAW,4BAA4B,cAAc;AAChF;AAAA,IACD;AAEA,UAAM,gBAAgB,QAAQ,QAAQ,QAAQ,KAAK,gBAAgB,IAChE,KAAK,mBACL,QAAQ;AAEX,UAAM,yBAAyB,WAAW,MAAM,SAAS;AAEzD,UAAM,UAAU,OAAO,QAAkE;AACxF,WAAK,SAAS,IAAI,QAAQ,WAAW;AAAA,QACpC,OAAO,iBAAiB;AAAA,QACxB,WAAW,QAAQ;AAAA,QACnB,YAAY,QAAQ;AAAA,QACpB,QAAQ,QAAQ;AAAA,QAChB,kBAAkB;AAAA,QAClB;AAAA,QACA,qBAAqB,KAAK,IAAI;AAAA,QAC9B,eAAe;AAAA,QACf,yBAAyB,CAAC;AAAA,QAC1B,sBAAsB,QAAQ;AAAA,QAC9B,MAAM,QAAQ;AAAA,QACd,YAAY,QAAQ;AAAA,QACpB,cAAc,QAAQ;AAAA,QACtB,yBAAyB,QAAQ;AAAA,MAClC,CAAC;AACD,WAAK,oBAAoB,QAAQ,WAAW,GAAG;AAAA,IAChD;AAEA,UAAM,EAAE,eAAe,OAAO,IAAI,KAAK,QAAQ,YAAY,CAAC,QAAQ;AACnE,WAAK,iBAAiB,GAAG;AACzB,YAAM,aAAa,IAAI,gBAAgB,QAAQ,eAAe;AAC9D,YAAM,eAAe,KAAK;AAAA,QACzB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA;AAAA;AAAA;AAAA;AAAA,UAKC,MAAM,OAAO;AAAA,YACZ,CAAC,GAAG,KAAK,cAAc,OAAO,CAAC,EAC7B,OAAO,CAAC,MAAM,EAAE,OAAO,QAAQ,UAAU,EACzC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AAAA,UACvB;AAAA,UACA,SAAS,CAAC;AAAA,QACX;AAAA,MACD;AACA,UAAI,CAAC,aAAa,GAAI,QAAO;AAG7B,UAAI,UAAiC;AACrC,UAAI,cAAc,kBAAkB,KAAK,kBAAkB;AAC1D,cAAM,WAAW,KAAK;AAAA,UACrB,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,UACA,WAAW;AAAA,QACZ;AACA,YAAI,CAAC,SAAS,GAAI,QAAO;AACzB,kBAAU,SAAS;AAAA,MACpB,WAAW,YAAY;AACtB,kBAAU,cAAc,WAAW,IAAI;AAAA,MACxC;AACA,aAAO;AAAA,QACN,MAAM;AAAA,QACN,kBAAkB,QAAQ;AAAA,QAC1B,eAAe,YAAY,UAAU,aAAa;AAAA,QAClD,iBAAiB,yBAAyB;AAAA,QAC1C,QAAQ,KAAK,OAAO,UAAU;AAAA,QAC9B,aAAa,IAAI,SAAS;AAAA,QAC1B,MAAM,EAAE,GAAG,aAAa,OAAO,GAAG,QAAQ;AAAA,QAC1C,YAAY,QAAQ;AAAA,QACpB,cAAc,QAAQ;AAAA,MACvB;AAAA,IACD,CAAC;AAED,SAAK,oBAAoB;AAEzB,QAAI,QAAQ;AACX,cAAQ,MAAM;AAAA,IACf;AAAA,EACD;AAAA,EAEQ,kBACP,SACA,SACC;AAED,QAAI,WAAW,QAAQ,UAAU,iBAAiB,WAAW;AAC5D;AAAA,IACD;AAEA,QAAI,SAAS;AACZ,cAAQ,sBAAsB,KAAK,IAAI;AAAA,IACxC;AAEA,UAAM,mBAAmB,CAAC,KAAK,uBAAuB;AAStD,UAAM,cAAc,CACnBA,UACA,IACA,IACA,QACA,UACI;AACJ,UAAI,CAACA,SAAQ,MAAO,CAAAA,SAAQ,QAAQ,EAAE,aAAa,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,EAAE;AACvF,MAAAA,SAAQ,MAAM,YAAY,EAAE,IAAI;AAChC,cAAQ,GAAG,CAAC,GAAG;AAAA,QACd,KAAK,aAAa;AACjB,UAAAA,SAAQ,MAAM,KAAK,KAAK,EAAE,IAAI,GAAG,CAAC;AAClC;AAAA,QACD,KAAK,aAAa;AACjB,iBAAO,UAAU,OAAO,2CAA2C;AACnE,UAAAA,SAAQ,MAAM,KAAK,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK;AAC5C;AAAA,QACD,KAAK,aAAa;AACjB,UAAAA,SAAQ,MAAM,KAAK,QAAQ,KAAK,EAAE;AAClC;AAAA,QACD;AACC,gCAAsB,GAAG,CAAC,CAAC;AAAA,MAC7B;AAAA,IACD;AAEA,UAAM,cAAc,CACnB,SACAA,UACA,IACA,QACA,cACwB;AACxB,YAAM,MAAM,UACT,KAAK,OAAO,uBAAuB,QAAQ,QAAQ,kBAAkB,IAAI,IACzE,EAAE,MAAM,WAAoB,OAAO,OAAO;AAC7C,UAAI,IAAI,SAAS,SAAS;AACzB,cAAM,IAAI,YAAY,IAAI,QAAQ,4BAA4B,cAAc;AAAA,MAC7E;AACA,UAAI,EAAE,OAAO,MAAM,IAAI;AAGvB,YAAM,MAAM,QAAQ,IAAI,EAAE;AAI1B,UAAI,WAAW;AACd,cAAMC,UAAS,UAAU,OAAO,MAAM,KAAK;AAC3C,YAAI,CAACA,QAAQ,QAAO,OAAO,GAAG,MAAS;AACvC,YAAI,CAAC,IAAK,SAAQA;AAAA,MACnB;AAEA,UAAI,KAAK;AAGR,cAAM,aAAa,aAAa,eAAe,KAAK,OAAO,OAAO,IAAI,QAAQ,CAAC;AAC/E,cAAM,OAAO,sBAAsB,KAAK,OAAO,UAAU;AACzD,YAAI,MAAM;AACT,kBAAQ,IAAI,IAAI,KAAK;AACrB,sBAAYD,UAAS,IAAI,CAAC,aAAa,OAAO,IAAI,GAAG,KAAK,KAAK;AAAA,QAChE;AAAA,MACD,OAAO;AAIN,cAAM,aAAa,aAAa,eAAe,KAAK,OAAO,OAAO,MAAM,QAAQ,CAAC;AACjF,uBAAe,OAAO,UAAU;AAChC,gBAAQ,IAAI,IAAI,KAAK;AACrB,oBAAYA,UAAS,IAAI,CAAC,aAAa,KAAK,KAAK,GAAG,QAAW,MAAS;AAAA,MACzE;AAEA,aAAO,OAAO,GAAG,MAAS;AAAA,IAC3B;AAEA,UAAM,gBAAgB,CACrB,SACAA,UACA,IACA,OACA,cACI;AAEJ,YAAM,MAAM,QAAQ,IAAI,EAAE;AAC1B,UAAI,CAAC,IAAK;AAEV,YAAM,aAAa,aAAa,eAAe,KAAK,OAAO,OAAO,IAAI,QAAQ,CAAC;AAG/E,YAAM,aAAa,UAChB,KAAK,OAAO,uBAAuB,KAAK,QAAQ,kBAAkB,MAAM,IACxE,EAAE,MAAM,WAAoB,OAAO,IAAI;AAC1C,UAAI,WAAW,SAAS,SAAS;AAChC,cAAM,IAAI,YAAY,WAAW,QAAQ,4BAA4B,cAAc;AAAA,MACpF;AAEA,UAAI,WAAW,UAAU,KAAK;AAE7B,cAAM,OAAO,mBAAmB,KAAK,OAAO,YAAY,gBAAgB;AACxE,YAAI,MAAM;AAET,cAAI,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAG;AAC3C,kBAAQ,IAAI,IAAI,KAAK,CAAC,CAAC;AACvB,sBAAYA,UAAS,IAAI,CAAC,aAAa,OAAO,KAAK,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;AAAA,QACrE;AAAA,MACD,OAAO;AAIN,cAAM,UAAU,gBAAgB,WAAW,OAAO,KAAK;AAEvD,cAAM,WAAW,UACd,KAAK,OAAO,uBAAuB,SAAS,QAAQ,kBAAkB,IAAI,IAC1E,EAAE,MAAM,WAAoB,OAAO,QAAQ;AAE9C,YAAI,SAAS,SAAS,SAAS;AAC9B,gBAAM,IAAI,YAAY,SAAS,QAAQ,4BAA4B,cAAc;AAAA,QAClF;AAEA,cAAM,OAAO,sBAAsB,KAAK,SAAS,OAAO,YAAY,gBAAgB;AACpF,YAAI,MAAM;AAET,cAAI,aAAa,CAAC,UAAU,KAAK,SAAS,KAAK,EAAG;AAClD,kBAAQ,IAAI,IAAI,SAAS,KAAK;AAC9B,sBAAYA,UAAS,IAAI,CAAC,aAAa,OAAO,IAAI,GAAG,KAAK,SAAS,KAAK;AAAA,QACzE;AAAA,MACD;AAAA,IACD;AAEA,UAAM,EAAE,QAAQ,eAAe,QAAQ,IAAI,KAAK,QAAQ;AAAA,MACvD,CAAC,QAAQ;AACR,aAAK,iBAAiB,GAAG;AAIzB,cAAM,aAA4B,EAAE,OAAO,KAAK;AAChD,cAAM,kBAAiC,EAAE,OAAO,KAAK;AAErD,YAAI,KAAK,gBAAgB,SAAS,cAAc,cAAc,WAAW,QAAQ,UAAU;AAC1F,cAAI,CAAC,QAAS,OAAM,IAAI,MAAM,yCAAyC;AAEvE,gBAAM,KAAK,QAAQ;AACnB,gBAAM,CAAC,MAAM,GAAG,IAAI,QAAQ;AAC5B,gBAAM,EAAE,SAAS,IAAI,KAAK;AAC1B,kBAAQ,MAAM;AAAA,YACb,KAAK,aAAa,KAAK;AAEtB,0BAAY,KAAK,eAAe,iBAAiB,IAAI;AAAA,gBACpD,GAAG;AAAA,gBACH;AAAA,gBACA;AAAA,cACD,CAAC;AACD;AAAA,YACD;AAAA,YACA,KAAK,aAAa,OAAO;AAExB,4BAAc,KAAK,eAAe,iBAAiB,IAAI;AAAA,gBACtD,GAAG;AAAA,gBACH,IAAI,CAAC,YAAY,KAAK,EAAE;AAAA,gBACxB,UAAU,CAAC,YAAY,KAAK,QAAQ;AAAA,cACrC,CAAC;AACD;AAAA,YACD;AAAA,UACD;AAAA,QACD;AAKA,cAAM,WAAW,CAAC,aACjB,CAAC,YACA,KAAK,YAAY,IAAI,QAAQ,IAAI,QAAQ,iBAAiB,SAAS,CAAC,QAAQ;AAE9E,YAAI,QAAQ,MAAM;AAEjB,qBAAW,CAAC,IAAI,EAAE,KAAK,yBAAyB,QAAQ,IAAK,GAAG;AAC/D,oBAAQ,GAAG,CAAC,GAAG;AAAA,cACd,KAAK,aAAa,KAAK;AAItB,oBAAI,CAAC,SAAS,GAAG,CAAC,EAAE,QAAQ,EAAG;AAG/B,oBACC,CAAC,KAAK,cAAc,IAAI,GAAG,CAAC,EAAE,QAAQ,KACtC,CAAC,KAAK,YAAY,IAAI,GAAG,CAAC,EAAE,QAAQ,GACnC;AACD,wBAAM,IAAI;AAAA,oBACT;AAAA,oBACA,4BAA4B;AAAA,kBAC7B;AAAA,gBACD;AACA,sBAAM,SAAS,GAAG,CAAC;AAGnB,oBAAI;AACJ,oBAAI,WAAW,KAAK,iBAAiB;AACpC,wBAAM,OAAQ,IAAI,IAAI,EAAE,KAAuB;AAK/C,sBAAI,QAAQ,KAAK,aAAa,OAAO,UAAU;AAC9C,yBAAK,KAAK;AAAA,sBACT;AAAA,sBACA,GAAG,KAAK,QAAQ,OAAO,OAAO,QAAQ;AAAA,sBACtC;AAAA,sBACA;AAAA,sBACA,QAAQ;AAAA,oBACT;AACA;AAAA,kBACD;AACA,wBAAM,eAAe,KAAK,cAAc,OAAO,QAAQ;AACvD,sBAAI,cAAc;AACjB,gCAAY,CAAC,SAAS,SAAS;AAC9B,4BAAMC,UAAS;AAAA,wBACd,UACG;AAAA,0BACA,SAAS,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,0BAC5D,MAAM;AAAA,0BACN,MAAM;AAAA,0BACN;AAAA,wBACD,IACC;AAAA,0BACA,SAAS,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,0BAC5D,MAAM;AAAA,0BACN,MAAM;AAAA,0BACN;AAAA,wBACD;AAAA,sBACH;AACA,0BAAI,CAACA,SAAQ;AACZ,6BAAK,KAAK;AAAA,0BACT;AAAA,0BACA,OAAO;AAAA,0BACP;AAAA,0BACA;AAAA,0BACA,QAAQ;AAAA,wBACT;AACA,+BAAO;AAAA,sBACR;AAEA,6BAAO,UAAU,OAAOA;AAAA,oBACzB;AAAA,kBACD;AAAA,gBACD;AACA,4BAAY,KAAK,YAAY,IAAI,QAAQ,SAAS;AAClD;AAAA,cACD;AAAA,cACA,KAAK,aAAa,OAAO;AACxB,sBAAM,MAAM,IAAI,IAAI,EAAE;AAEtB,oBAAI,CAAC,IAAK;AACV,oBAAI,CAAC,SAAS,IAAI,QAAQ,EAAG;AAG7B,sBAAM,iBAAiB,WAAW,KAAK,cAAc,IAAI,QAAQ;AACjE,sBAAM,YAAY,iBACf,CAAC,MAAS,SAAY;AACtB,wBAAMA,UAAS,eAAe;AAAA,oBAC7B,SAAS,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,oBAC5D,MAAM;AAAA,oBACN;AAAA,oBACA;AAAA,kBACD,CAAC;AACD,sBAAI,CAACA,SAAQ;AACZ,yBAAK,KAAK;AAAA,sBACT;AAAA,sBACA,IAAI;AAAA,sBACJ;AAAA,sBACA;AAAA,sBACA,QAAQ;AAAA,oBACT;AAAA,kBACD;AACA,yBAAOA;AAAA,gBACR,IACC;AAEH,8BAAc,KAAK,YAAY,IAAI,GAAG,CAAC,GAAG,SAAS;AACnD;AAAA,cACD;AAAA,cACA,KAAK,aAAa,QAAQ;AACzB,sBAAM,MAAM,IAAI,IAAI,EAAE;AACtB,oBAAI,CAAC,KAAK;AAET;AAAA,gBACD;AACA,oBAAI,CAAC,SAAS,IAAI,QAAQ,EAAG;AAG7B,sBAAM,kBAAkB,WAAW,KAAK,cAAc,IAAI,QAAQ;AAClE,oBACC,mBACA,CAAC,gBAAgB;AAAA,kBAChB,SAAS,EAAE,WAAW,QAAQ,WAAW,MAAM,QAAQ,KAAK;AAAA,kBAC5D,MAAM;AAAA,kBACN,MAAM;AAAA,kBACN,MAAM;AAAA,gBACP,CAAC,GACA;AACD,uBAAK,KAAK;AAAA,oBACT;AAAA,oBACA,IAAI;AAAA,oBACJ;AAAA,oBACA;AAAA,oBACA,QAAQ;AAAA,kBACT;AACA;AAAA,gBACD;AAIA,oBAAI,OAAO,EAAE;AACb,4BAAY,YAAY,IAAI,IAAI,KAAK,MAAS;AAC9C;AAAA,cACD;AAAA,YACD;AAAA,UACD;AAAA,QACD;AAEA,eAAO,EAAE,YAAY,gBAAgB;AAAA,MACtC;AAAA,MACA,EAAE,IAAI,KAAK,eAAe,aAAa,iBAAiB;AAAA,IACzD;AAEA,SAAK,oBAAoB;AAEzB,QAAI;AACJ,QAAI,WAAW,SAAS;AAEvB,aAAO,WAAW,QAAQ,EAAE,aAAa,cAAc,OAAO,KAAK,CAAC,GAAG,MAAM,QAAQ;AAAA,IACtF;AAEA,QAAI,QAAQ,OAAO,WAAW,OAAO,aAAa,QAAQ,IAAI,GAAG;AAChE,mBAAa;AAAA,QACZ,MAAM;AAAA,QACN,aAAa,QAAQ;AAAA,QACrB,aAAa;AAAA,QACb,QAAQ;AAAA,MACT;AAAA,IACD,WAAW,CAAC,OAAO,WAAW,OAAO,aAAa;AACjD,mBAAa;AAAA,QACZ,MAAM;AAAA,QACN,aAAa,QAAQ;AAAA,QACrB,aAAa;AAAA,QACb,QAAQ;AAAA,MACT;AAAA,IACD,WAAW,SAAS;AAGnB,YAAM,OAAO,KAAK;AAAA,QACjB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,OAAO,WAAW,MAAM;AAAA,QACxB,OAAO,WAAW,MAAM;AAAA,MACzB;AACA,UAAI,KAAK,IAAI;AACZ,qBAAa;AAAA,UACZ,MAAM;AAAA,UACN,aAAa,QAAQ;AAAA,UACrB,aAAa;AAAA,UACb,QAAQ,EAAE,gBAAgB,KAAK,MAAM;AAAA,QACtC;AAAA,MACD;AAAA,IAED;AAEA,QAAI,WAAW,YAAY;AAC1B,WAAK,oBAAoB,QAAQ,WAAW,UAAU;AAAA,IACvD;AACA,QAAI,OAAO,WAAW,SAAS,OAAO,gBAAgB,OAAO;AAC5D,WAAK;AAAA,QACJ;AAAA,UACC,MAAM;AAAA,YACL,GAAG,OAAO,WAAW,OAAO,KAAK;AAAA,YACjC,GAAG,OAAO,gBAAgB,OAAO,KAAK;AAAA,UACvC;AAAA,UACA,SAAS;AAAA,YACR,GAAI,OAAO,WAAW,OAAO,KAAK,WAAW,CAAC;AAAA,YAC9C,GAAI,OAAO,gBAAgB,OAAO,KAAK,WAAW,CAAC;AAAA,UACpD;AAAA,QACD;AAAA,QACA;AAAA,UACC,GAAG,OAAO,WAAW,OAAO;AAAA,UAC5B,GAAG,OAAO,gBAAgB,OAAO;AAAA,QAClC;AAAA,QACA,SAAS;AAAA,MACV;AAAA,IACD;AAEA,QAAI,OAAO,gBAAgB,OAAO;AACjC,qBAAe,MAAM;AACpB,aAAK,mBAAmB;AAAA,MACzB,CAAC;AAAA,IACF;AAEA,QAAI,OAAO,WAAW,SAAS,KAAK,oBAAoB;AACvD,YAAM,OAAO,OAAO,WAAW,MAAM;AACrC,qBAAe,MAAM;AACpB,YAAI;AACH,eAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAAA,QAClD,SAAS,GAAG;AACX,eAAK,KAAK,QAAQ,4BAA4B,CAAC;AAAA,QAChD;AAAA,MACD,CAAC;AAAA,IACF;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,YAAY,WAAmB;AAC9B,SAAK,cAAc,SAAS;AAAA,EAC7B;AACD;AAUO,MAAM,cAAqE;AAAA,EAChE,YAAY,IAAI,QAAmB,WAAW;AAAA,EAE/D,IAAI,IAAuC;AAC1C,WAAO,KAAK,UAAU,IAAI,EAAE;AAAA,EAC7B;AAAA,EAEA,IAAI,IAAY,OAAgB;AAC/B,SAAK,UAAU,IAAI,IAAI,KAAK;AAAA,EAC7B;AAAA,EAEA,OAAO,IAAkB;AACxB,SAAK,UAAU,OAAO,EAAE;AAAA,EACzB;AAAA,EAEA,SAAS;AACR,WAAO,KAAK,UAAU,OAAO;AAAA,EAC9B;AACD;",
+  "sourcesContent": ["import {\n\tAtomMap,\n\tMigrationFailureReason,\n\tRecordType,\n\tSerializedSchema,\n\tStoreSchema,\n\tUnknownRecord,\n} from '@tldraw/store'\nimport {\n\tassert,\n\tassertExists,\n\texhaustiveSwitchError,\n\tgetOwnProperty,\n\tisEqual,\n\tisNativeStructuredClone,\n\tobjectMapEntriesIterable,\n\tResult,\n\tthrottle,\n} from '@tldraw/utils'\nimport { createNanoEvents } from 'nanoevents'\nimport {\n\tapplyObjectDiff,\n\tdiffRecord,\n\tNetworkDiff,\n\tObjectDiff,\n\tRecordOp,\n\tRecordOpType,\n\tValueOpType,\n} from './diff'\nimport { interval } from './interval'\nimport {\n\tgetTlsyncProtocolVersion,\n\tTLIncompatibilityReason,\n\tTLObjectStoreAccess,\n\tTLSocketClientSentEvent,\n\tTLSocketServerSentDataEvent,\n\tTLSocketServerSentEvent,\n} from './protocol'\nimport { applyAndDiffRecord, diffAndValidateRecord, validateRecord } from './recordDiff'\nimport {\n\tRoomSession,\n\tRoomSessionState,\n\tSESSION_IDLE_TIMEOUT,\n\tSESSION_REMOVAL_WAIT_TIME,\n\tSESSION_START_WAIT_TIME,\n} from './RoomSession'\nimport { TLSyncLog } from './TLSocketRoom'\nimport { TLSyncError, TLSyncErrorCloseEventCode, TLSyncErrorCloseEventReason } from './TLSyncClient'\nimport {\n\tTLSyncForwardDiff,\n\tTLSyncStorage,\n\tTLSyncStorageTransaction,\n\ttoNetworkDiff,\n} from './TLSyncStorage'\n\n/**\n * WebSocket interface for server-side room connections. This defines the contract\n * that socket implementations must follow to work with TLSyncRoom.\n *\n * @internal\n */\nexport interface TLRoomSocket<R extends UnknownRecord> {\n\t/**\n\t * Whether the socket connection is currently open and ready to send messages.\n\t */\n\tisOpen: boolean\n\t/**\n\t * Send a message to the connected client through this socket.\n\t *\n\t * @param msg - The server-sent event message to transmit\n\t */\n\tsendMessage(msg: TLSocketServerSentEvent<R>): void\n\t/**\n\t * Close the socket connection with optional status code and reason.\n\t *\n\t * @param code - WebSocket close code (optional)\n\t * @param reason - Human-readable close reason (optional)\n\t */\n\tclose(code?: number, reason?: string): void\n}\n\n/**\n * The minimum time interval (in milliseconds) between sending batched data messages\n * to clients. This debouncing prevents overwhelming clients with rapid updates.\n * @public\n */\nexport const DATA_MESSAGE_DEBOUNCE_INTERVAL = 1000 / 60\n\nconst timeSince = (time: number) => Date.now() - time\n\n/**\n * Snapshot of a room's complete state that can be persisted and restored.\n * Contains all documents, tombstones, and metadata needed to reconstruct the room.\n *\n * @public\n */\nexport interface RoomSnapshot {\n\t/**\n\t * The current logical clock value for the room\n\t */\n\tclock?: number\n\t/**\n\t * Clock value when document data was last changed (optional for backwards compatibility)\n\t */\n\tdocumentClock?: number\n\t/**\n\t * Array of all document records with their last modification clocks\n\t */\n\tdocuments: Array<{ state: UnknownRecord; lastChangedClock: number }>\n\t/**\n\t * Map of deleted record IDs to their deletion clock values (optional)\n\t */\n\ttombstones?: Record<string, number>\n\t/**\n\t * Clock value where tombstone history begins - older deletions are not tracked (optional)\n\t */\n\ttombstoneHistoryStartsAtClock?: number\n\t/**\n\t * Serialized schema used when creating this snapshot (optional)\n\t */\n\tschema?: SerializedSchema\n}\n\n/**\n * Authorizes a single record write from a client: any per-record, per-session rule the host wants\n * to enforce server-side \u2014 veto writes the session isn't allowed to make, or rewrite the record on\n * create. The session's `meta` carries whatever the rule needs (identity, roles, \u2026); for example,\n * force a comment's `authorId` to the signed-in user so nobody can post in someone else's name.\n *\n * Called on **create**, **update**, and **delete** of records whose `typeName` it's registered for\n * (see {@link TLRecordAuthorizers}), and only for client pushes \u2014 never for server-initiated writes.\n *\n * `prev` and `next` are always at the **server's** schema version: client writes are migrated\n * before the authorizer runs, so guarding or stamping a field never requires knowing what older\n * clients call it. On create, the record you return is what gets stored (after validation) \u2014 no\n * migration runs afterwards, so stamped fields can't be clobbered.\n *\n * Return `null` to reject the write \u2014 it's skipped and the client self-corrects, exactly like the\n * `objectAccess` gate. Otherwise the write is allowed, and:\n *\n * - on **create**, the record you return is what gets stored, so stamp identity fields here (e.g.\n *   set `authorId` from `session.meta`);\n * - on **update** and **delete**, only allow-vs-reject is used (the returned record's contents are\n *   ignored), so use them to veto changes to immutable fields or unauthorized deletes \u2014 return\n *   `next`/`prev` to allow, `null` to reject.\n *\n * \u26A0\uFE0E Runs synchronously inside the commit transaction, on the same path as every document edit \u2014 it\n * must be fast and do **no** I/O. `next`/`prev` are client-controlled records, so treat their\n * contents as untrusted; prefer returning `null` to reject over throwing, though a throw is\n * caught, logged, and treated as a rejection (fail closed) rather than crashing the push. For\n * expensive, async checks (e.g. resolving mentions against who can access a file), react after the\n * fact via `onCommittedChanges`.\n *\n * @public\n */\nexport type TLRecordAuthorizer<Rec extends UnknownRecord, SessionMeta> = (\n\targs: {\n\t\t/** The session performing the write: its host-provided `meta` (e.g. the authenticated user\n\t\t *  id) and the canvas-lane `isReadonly` state, for hosts whose object-lane policy follows\n\t\t *  canvas access. */\n\t\tsession: { sessionId: string; isReadonly: boolean; meta: SessionMeta }\n\t} & (\n\t\t| { type: 'create'; prev: null; next: Rec }\n\t\t| { type: 'update'; prev: Rec; next: Rec }\n\t\t| { type: 'delete'; prev: Rec; next: null }\n\t)\n) => Rec | null\n\n/**\n * A map from record `typeName` to a {@link TLRecordAuthorizer} for that record type. Only listed\n * types are authorized; every other record writes through untouched, so this stays off the hot path\n * for the vast majority of writes (shape drags etc.).\n *\n * Each authorizer is typed to its record \u2014 e.g. `next` in the `comment` entry is a `TLComment` \u2014 so\n * renaming a field on the record makes the authorizer that reads it fail to compile, rather than\n * silently stamp or guard the wrong field.\n *\n * Presence records are never authorized (presence is per-session and ephemeral); registering the\n * presence typeName is a construction-time error.\n *\n * @public\n */\nexport type TLRecordAuthorizers<R extends UnknownRecord, SessionMeta> = {\n\t[K in R['typeName']]?: TLRecordAuthorizer<Extract<R, { typeName: K }>, SessionMeta>\n}\n\n/**\n * A collaborative workspace that manages multiple client sessions and synchronizes\n * document changes between them. The room serves as the authoritative source for\n * all document state and handles conflict resolution, schema migrations, and\n * real-time data distribution.\n *\n * @example\n * ```ts\n * const room = new TLSyncRoom({\n *   schema: mySchema,\n *   onDataChange: () => saveToDatabase(room.getSnapshot()),\n *   onPresenceChange: () => updateLiveCursors()\n * })\n *\n * // Handle new client connections\n * room.handleNewSession({\n *   sessionId: 'user-123',\n *   socket: webSocketAdapter,\n *   meta: { userId: '123', name: 'Alice' },\n *   isReadonly: false\n * })\n * ```\n *\n * @internal\n */\nexport class TLSyncRoom<R extends UnknownRecord, SessionMeta> {\n\t// A table of connected clients\n\treadonly sessions = new Map<string, RoomSession<R, SessionMeta>>()\n\n\tprivate lastDocumentClock = 0\n\n\tprivate pruneTimer: ReturnType<typeof setTimeout> | null = null\n\n\tpruneSessions = throttle(() => {\n\t\tif (this.pruneTimer) {\n\t\t\tclearTimeout(this.pruneTimer)\n\t\t\tthis.pruneTimer = null\n\t\t}\n\t\tfor (const client of this.sessions.values()) {\n\t\t\tswitch (client.state) {\n\t\t\t\tcase RoomSessionState.Connected: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.lastInteractionTime) > this.sessionIdleTimeout\n\t\t\t\t\tif (hasTimedOut || !client.socket.isOpen) {\n\t\t\t\t\t\tthis.cancelSession(client.sessionId)\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tcase RoomSessionState.AwaitingConnectMessage: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.sessionStartTime) > SESSION_START_WAIT_TIME\n\t\t\t\t\tif (hasTimedOut || !client.socket.isOpen) {\n\t\t\t\t\t\t// remove immediately\n\t\t\t\t\t\tthis.removeSession(client.sessionId)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tthis.scheduleFollowUpPrune()\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tcase RoomSessionState.AwaitingRemoval: {\n\t\t\t\t\tconst hasTimedOut = timeSince(client.cancellationTime) > SESSION_REMOVAL_WAIT_TIME\n\t\t\t\t\tif (hasTimedOut) {\n\t\t\t\t\t\tthis.removeSession(client.sessionId)\n\t\t\t\t\t} else {\n\t\t\t\t\t\tthis.scheduleFollowUpPrune()\n\t\t\t\t\t}\n\t\t\t\t\tbreak\n\t\t\t\t}\n\t\t\t\tdefault: {\n\t\t\t\t\texhaustiveSwitchError(client)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}, 1000)\n\n\tprivate scheduleFollowUpPrune() {\n\t\tif (this.pruneTimer) return\n\t\tthis.pruneTimer = setTimeout(this.pruneSessions, SESSION_REMOVAL_WAIT_TIME + 100)\n\t}\n\n\treadonly presenceStore = new PresenceStore<R>()\n\n\tprivate disposables: Array<() => void> = []\n\n\tprivate _isClosed = false\n\n\t/**\n\t * Close the room and clean up all resources. Disconnects all sessions\n\t * and stops background processes.\n\t */\n\tclose() {\n\t\tthis.disposables.forEach((d) => d())\n\t\tthis.sessions.forEach((session) => {\n\t\t\tsession.socket.close()\n\t\t})\n\t\tthis._isClosed = true\n\t}\n\n\t/**\n\t * Check if the room has been closed and is no longer accepting connections.\n\t *\n\t * @returns True if the room is closed\n\t */\n\tisClosed() {\n\t\treturn this._isClosed\n\t}\n\n\treadonly events = createNanoEvents<{\n\t\troom_became_empty(): void\n\t\tsession_removed(args: { sessionId: string; meta: SessionMeta }): void\n\t}>()\n\n\t// Storage layer for documents, tombstones, and clocks\n\tprivate readonly storage: TLSyncStorage<R>\n\n\treadonly serializedSchema: SerializedSchema\n\n\treadonly documentTypes: Set<string>\n\t/**\n\t * Record types served by the object-store lane. Object records ride the same wire messages\n\t * as document records but are gated by the session's `objectAccess` instead of `isReadonly`,\n\t * and are excluded from `documentTypes` so hosts can persist them in a separate lane.\n\t */\n\treadonly objectTypes: Set<string>\n\treadonly presenceType: RecordType<R, any> | null\n\tprivate log?: TLSyncLog\n\tpublic readonly schema: StoreSchema<R, any>\n\tprivate onPresenceChange?(): void\n\tprivate onCommittedChanges?(args: { diff: TLSyncForwardDiff<R>; documentClock: number }): void\n\tprivate readonly authorizeRecord?: TLRecordAuthorizers<R, SessionMeta>\n\tprivate readonly sessionIdleTimeout: number\n\n\t/**\n\t * The authorizer registered for a record type, widened to the room's record union. Each entry in\n\t * `authorizeRecord` is typed to its specific record; the cast here is the one place we can't\n\t * statically correlate a runtime `typeName` with its record type, so it lives in the library\n\t * rather than in every consumer.\n\t */\n\tprivate authorizerFor(typeName: R['typeName']): TLRecordAuthorizer<R, SessionMeta> | undefined {\n\t\tconst authorize = this.authorizeRecord?.[typeName] as\n\t\t\t| TLRecordAuthorizer<R, SessionMeta>\n\t\t\t| undefined\n\t\tif (!authorize) return undefined\n\t\t// Fail closed: an authorizer that throws rejects the write (and is logged) rather than\n\t\t// aborting the whole push. Authorizers are security-sensitive, so a bug must never let a\n\t\t// write through.\n\t\treturn (args) => {\n\t\t\ttry {\n\t\t\t\treturn authorize(args)\n\t\t\t} catch (e) {\n\t\t\t\tthis.log?.error?.('record authorizer threw; rejecting the write', e)\n\t\t\t\treturn null\n\t\t\t}\n\t\t}\n\t}\n\n\tconstructor(opts: {\n\t\tlog?: TLSyncLog\n\t\tschema: StoreSchema<R, any>\n\t\tonPresenceChange?(): void\n\t\t/**\n\t\t * Called once after a client push commits, with the committed document diff. Fires for\n\t\t * local and remote pushes. Use this to react to document changes (e.g. persist certain\n\t\t * record types to a separate lane, or project them to an external store) as soon as they\n\t\t * commit. Best-effort \u2014 do not throw; do not block.\n\t\t */\n\t\tonCommittedChanges?(args: { diff: TLSyncForwardDiff<R>; documentClock: number }): void\n\t\t/**\n\t\t * Record type names to serve through the object-store lane instead of the document lane.\n\t\t * Each must be a document-scoped type registered in the schema. Object-lane writes are\n\t\t * gated per session by `objectAccess` rather than `isReadonly`.\n\t\t */\n\t\tobjectTypes?: readonly string[]\n\t\t/**\n\t\t * Per-type authorizers for client record writes (create, update, delete): veto or, on\n\t\t * create, rewrite. See {@link TLRecordAuthorizers}.\n\t\t */\n\t\tauthorizeRecord?: TLRecordAuthorizers<R, SessionMeta>\n\t\tstorage: TLSyncStorage<R>\n\t\tclientTimeout?: number\n\t}) {\n\t\tthis.schema = opts.schema\n\t\tthis.log = opts.log\n\t\tthis.onPresenceChange = opts.onPresenceChange\n\t\tthis.onCommittedChanges = opts.onCommittedChanges\n\t\tthis.authorizeRecord = opts.authorizeRecord\n\t\tthis.storage = opts.storage\n\t\tthis.sessionIdleTimeout = opts.clientTimeout ?? SESSION_IDLE_TIMEOUT\n\n\t\tassert(\n\t\t\tisNativeStructuredClone,\n\t\t\t'TLSyncRoom is supposed to run either on Cloudflare Workers' +\n\t\t\t\t'or on a 18+ version of Node.js, which both support the native structuredClone API'\n\t\t)\n\n\t\t// do a json serialization cycle to make sure the schema has no 'undefined' values\n\t\tthis.serializedSchema = JSON.parse(JSON.stringify(this.schema.serialize()))\n\n\t\tthis.objectTypes = new Set(opts.objectTypes ?? [])\n\t\tfor (const typeName of this.objectTypes) {\n\t\t\tconst type = getOwnProperty(this.schema.types, typeName)\n\t\t\tassert(type, `TLSyncRoom: object type '${typeName}' is not registered in the schema`)\n\t\t\tassert(\n\t\t\t\ttype.scope === 'document',\n\t\t\t\t`TLSyncRoom: object type '${typeName}' must have scope 'document', got '${type.scope}'`\n\t\t\t)\n\t\t}\n\n\t\t// object-lane types are partitioned out of the document lane\n\t\tthis.documentTypes = new Set(\n\t\t\tObject.values<RecordType<R, any>>(this.schema.types)\n\t\t\t\t.filter((t) => t.scope === 'document' && !this.objectTypes.has(t.typeName))\n\t\t\t\t.map((t) => t.typeName)\n\t\t)\n\n\t\tconst presenceTypes = new Set(\n\t\t\tObject.values<RecordType<R, any>>(this.schema.types).filter((t) => t.scope === 'presence')\n\t\t)\n\n\t\tif (presenceTypes.size > 1) {\n\t\t\tthrow new Error(\n\t\t\t\t`TLSyncRoom: exactly zero or one presence type is expected, but found ${presenceTypes.size}`\n\t\t\t)\n\t\t}\n\n\t\tthis.presenceType = presenceTypes.values().next()?.value ?? null\n\n\t\t// The presence lane never consults authorizers, so a presence key in `authorizeRecord`\n\t\t// would be a silent no-op \u2014 fail loudly at construction instead.\n\t\tif (this.presenceType && this.authorizeRecord) {\n\t\t\tassert(\n\t\t\t\t!getOwnProperty(this.authorizeRecord, this.presenceType.typeName),\n\t\t\t\t`TLSyncRoom: authorizeRecord['${this.presenceType.typeName}'] is a presence type; presence records are not authorized`\n\t\t\t)\n\t\t}\n\n\t\tconst { documentClock } = this.storage.transaction((txn) => {\n\t\t\tthis.schema.migrateStorage(txn)\n\t\t})\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tthis.disposables.push(\n\t\t\tthis.storage.onChange(({ id }) => {\n\t\t\t\tif (id !== this.internalTxnId) {\n\t\t\t\t\tthis.broadcastExternalStorageChanges()\n\t\t\t\t}\n\t\t\t})\n\t\t)\n\n\t\tthis.disposables.push(() => {\n\t\t\tthis.pruneSessions.cancel()\n\t\t\tif (this.pruneTimer) {\n\t\t\t\tclearTimeout(this.pruneTimer)\n\t\t\t\tthis.pruneTimer = null\n\t\t\t}\n\t\t})\n\n\t\t// When clientTimeout is finite, run periodic pruning so idle sessions are\n\t\t// cleaned up even with no traffic. When Infinity or 0 we skip the interval\n\t\t// (e.g. for hibernation); without it, pruning only runs on message or when\n\t\t// socket close/error triggers cancelSession, so pruning idle sessions\n\t\t// reliably depends on the runtime delivering those events.\n\t\tif (Number.isFinite(this.sessionIdleTimeout) && this.sessionIdleTimeout > 0) {\n\t\t\tconst pruneIntervalMs = Math.min(2000, Math.floor(this.sessionIdleTimeout / 4))\n\t\t\tthis.disposables.push(interval(() => this.pruneSessions(), pruneIntervalMs))\n\t\t}\n\t}\n\tprivate broadcastExternalStorageChanges() {\n\t\tthis.storage.transaction((txn) => {\n\t\t\tthis.broadcastChanges(txn)\n\t\t\tthis.lastDocumentClock = txn.getClock()\n\t\t}) // no id needed because this only reads, no writes.\n\t}\n\n\t/**\n\t * Send a message to a particular client. Debounces data events\n\t *\n\t * @param sessionId - The id of the session to send the message to.\n\t * @param message - The message to send. UNSAFE Any diffs must have been downgraded already if necessary\n\t */\n\tprivate _unsafe_sendMessage(\n\t\tsessionId: string,\n\t\tmessage: TLSocketServerSentEvent<R> | TLSocketServerSentDataEvent<R>\n\t) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Tried to send message to unknown session', message.type)\n\t\t\treturn\n\t\t}\n\t\tif (session.state !== RoomSessionState.Connected) {\n\t\t\tthis.log?.warn?.('Tried to send message to disconnected client', message.type)\n\t\t\treturn\n\t\t}\n\t\tif (session.socket.isOpen) {\n\t\t\tif (message.type !== 'patch' && message.type !== 'push_result') {\n\t\t\t\t// this is not a data message\n\t\t\t\tif (message.type !== 'pong') {\n\t\t\t\t\t// non-data messages like \"connect\" might still need to be ordered correctly with\n\t\t\t\t\t// respect to data messages, so it's better to flush just in case\n\t\t\t\t\tthis._flushDataMessages(sessionId)\n\t\t\t\t}\n\t\t\t\tsession.socket.sendMessage(message)\n\t\t\t} else {\n\t\t\t\tif (session.debounceTimer === null) {\n\t\t\t\t\t// this is the first message since the last flush, don't delay it\n\t\t\t\t\tsession.socket.sendMessage({ type: 'data', data: [message] })\n\n\t\t\t\t\tsession.debounceTimer = setTimeout(\n\t\t\t\t\t\t() => this._flushDataMessages(sessionId),\n\t\t\t\t\t\tDATA_MESSAGE_DEBOUNCE_INTERVAL\n\t\t\t\t\t)\n\t\t\t\t} else {\n\t\t\t\t\tsession.outstandingDataMessages.push(message)\n\t\t\t\t}\n\t\t\t}\n\t\t} else {\n\t\t\tthis.cancelSession(session.sessionId)\n\t\t}\n\t}\n\n\t// needs to accept sessionId and not a session because the session might be dead by the time\n\t// the timer fires\n\t_flushDataMessages(sessionId: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\n\t\tif (!session || session.state !== RoomSessionState.Connected) {\n\t\t\treturn\n\t\t}\n\n\t\tsession.debounceTimer = null\n\n\t\tif (session.outstandingDataMessages.length > 0) {\n\t\t\t// hand the buffer over and start a fresh one, rather than truncating in\n\t\t\t// place, so sockets that defer serialization don't see an emptied array\n\t\t\tconst data = session.outstandingDataMessages\n\t\t\tsession.outstandingDataMessages = []\n\t\t\tsession.socket.sendMessage({ type: 'data', data })\n\t\t}\n\t}\n\n\t/** @internal */\n\tprivate removeSession(sessionId: string, fatalReason?: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Tried to remove unknown session')\n\t\t\treturn\n\t\t}\n\n\t\tthis.sessions.delete(sessionId)\n\n\t\ttry {\n\t\t\tif (fatalReason) {\n\t\t\t\tsession.socket.close(TLSyncErrorCloseEventCode, fatalReason)\n\t\t\t} else {\n\t\t\t\tsession.socket.close()\n\t\t\t}\n\t\t} catch {\n\t\t\t// noop, calling .close() multiple times is fine\n\t\t}\n\n\t\tconst presence = this.presenceStore.get(session.presenceId ?? '')\n\t\tif (presence) {\n\t\t\tthis.presenceStore.delete(session.presenceId!)\n\t\t\t// Broadcast presence removal - use RecordsDiff with the removed record\n\t\t\tthis.broadcastPatch({\n\t\t\t\tputs: {},\n\t\t\t\tdeletes: [session.presenceId!],\n\t\t\t})\n\t\t}\n\n\t\tthis.events.emit('session_removed', { sessionId, meta: session.meta })\n\t\tif (this.sessions.size === 0) {\n\t\t\tthis.events.emit('room_became_empty')\n\t\t}\n\t}\n\n\tprivate cancelSession(sessionId: string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\treturn\n\t\t}\n\n\t\tif (session.state === RoomSessionState.AwaitingRemoval) {\n\t\t\tthis.log?.warn?.('Tried to cancel session that is already awaiting removal')\n\t\t\treturn\n\t\t}\n\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.AwaitingRemoval,\n\t\t\tsessionId,\n\t\t\tpresenceId: session.presenceId,\n\t\t\tsocket: session.socket,\n\t\t\tcancellationTime: Date.now(),\n\t\t\tmeta: session.meta,\n\t\t\tisReadonly: session.isReadonly,\n\t\t\tobjectAccess: session.objectAccess,\n\t\t\trequiresLegacyRejection: session.requiresLegacyRejection,\n\t\t\tsupportsStringAppend: session.supportsStringAppend,\n\t\t})\n\n\t\ttry {\n\t\t\tsession.socket.close()\n\t\t} catch {\n\t\t\t// noop, calling .close() multiple times is fine\n\t\t}\n\n\t\tthis.scheduleFollowUpPrune()\n\t}\n\n\treadonly internalTxnId = 'TLSyncRoom.txn'\n\n\t/**\n\t * Broadcast a patch to all connected clients except the one with the sessionId provided.\n\t *\n\t * @param diff - The TLSyncForwardDiff with full records (used for migration)\n\t * @param networkDiff - Optional pre-computed NetworkDiff for sessions not needing migration.\n\t *                      If not provided, will be computed from recordsDiff.\n\t * @param sourceSessionId - Optional session ID to exclude from the broadcast\n\t */\n\tprivate broadcastPatch(\n\t\tdiff: TLSyncForwardDiff<R>,\n\t\tnetworkDiff?: NetworkDiff<R> | null,\n\t\tsourceSessionId?: string\n\t) {\n\t\t// Pre-compute network diff if not provided\n\t\tconst unmigrated = networkDiff ?? toNetworkDiff(diff)\n\t\tif (!unmigrated) return this\n\n\t\tthis.sessions.forEach((session) => {\n\t\t\tif (session.state !== RoomSessionState.Connected) return\n\t\t\tif (sourceSessionId === session.sessionId) return\n\t\t\tif (!session.socket.isOpen) {\n\t\t\t\tthis.cancelSession(session.sessionId)\n\t\t\t\treturn\n\t\t\t}\n\n\t\t\tconst diffResult = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsession.serializedSchema,\n\t\t\t\tsession.requiresDownMigrations,\n\t\t\t\tdiff\n\t\t\t)\n\t\t\tif (!diffResult.ok) return\n\n\t\t\tthis._unsafe_sendMessage(session.sessionId, {\n\t\t\t\ttype: 'patch',\n\t\t\t\tdiff: diffResult.value,\n\t\t\t\tserverClock: this.lastDocumentClock,\n\t\t\t})\n\t\t})\n\t\treturn this\n\t}\n\n\t/**\n\t * Send a custom message to a connected client. Useful for application-specific\n\t * communication that doesn't involve document synchronization.\n\t *\n\t * @param sessionId - The ID of the session to send the message to\n\t * @param data - The custom payload to send (will be JSON serialized)\n\t * @example\n\t * ```ts\n\t * // Send a custom notification\n\t * room.sendCustomMessage('user-123', {\n\t *   type: 'notification',\n\t *   message: 'Document saved successfully'\n\t * })\n\t *\n\t * // Send user-specific data\n\t * room.sendCustomMessage('user-456', {\n\t *   type: 'user_permissions',\n\t *   canEdit: true,\n\t *   canDelete: false\n\t * })\n\t * ```\n\t */\n\tsendCustomMessage(sessionId: string, data: any): void {\n\t\tthis._unsafe_sendMessage(sessionId, { type: 'custom', data })\n\t}\n\n\t/**\n\t * Register a new client session with the room. The session will be in an awaiting\n\t * state until it sends a connect message with protocol handshake.\n\t *\n\t * @param opts - Session configuration\n\t *   - sessionId - Unique identifier for this session\n\t *   - socket - WebSocket adapter for communication\n\t *   - meta - Application-specific metadata for this session\n\t *   - isReadonly - Whether this session can modify documents\n\t * @returns This room instance for method chaining\n\t * @example\n\t * ```ts\n\t * room.handleNewSession({\n\t *   sessionId: crypto.randomUUID(),\n\t *   socket: new WebSocketAdapter(ws),\n\t *   meta: { userId: '123', name: 'Alice', avatar: 'url' },\n\t *   isReadonly: !hasEditPermission\n\t * })\n\t * ```\n\t *\n\t * @internal\n\t */\n\thandleNewSession(opts: {\n\t\tsessionId: string\n\t\tsocket: TLRoomSocket<R>\n\t\tmeta: SessionMeta\n\t\tisReadonly: boolean\n\t\tobjectAccess?: TLObjectStoreAccess\n\t}) {\n\t\tconst { sessionId, socket, meta, isReadonly, objectAccess } = opts\n\t\tconst existing = this.sessions.get(sessionId)\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.AwaitingConnectMessage,\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tpresenceId: existing?.presenceId ?? this.presenceType?.createId() ?? null,\n\t\t\tsessionStartTime: Date.now(),\n\t\t\tmeta,\n\t\t\tisReadonly: isReadonly ?? false,\n\t\t\tobjectAccess: objectAccess ?? 'write',\n\t\t\t// this gets set later during handleConnectMessage\n\t\t\trequiresLegacyRejection: false,\n\t\t\tsupportsStringAppend: true,\n\t\t})\n\t\treturn this\n\t}\n\n\t/**\n\t * Resume a previously-connected session directly into `Connected` state, bypassing the\n\t * connect handshake. Used after server hibernation when the WebSocket is still alive but\n\t * all in-memory state has been lost.\n\t *\n\t * @internal\n\t */\n\thandleResumedSession(opts: {\n\t\tsessionId: string\n\t\tsocket: TLRoomSocket<R>\n\t\tmeta: SessionMeta\n\t\tisReadonly: boolean\n\t\tobjectAccess?: TLObjectStoreAccess\n\t\tserializedSchema: SerializedSchema\n\t\tpresenceId: string | null\n\t\tpresenceRecord: UnknownRecord | null\n\t\trequiresLegacyRejection: boolean\n\t\tsupportsStringAppend: boolean\n\t}) {\n\t\tconst {\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tmeta,\n\t\t\tisReadonly,\n\t\t\tobjectAccess,\n\t\t\tserializedSchema,\n\t\t\tpresenceId,\n\t\t\tpresenceRecord,\n\t\t\trequiresLegacyRejection,\n\t\t\tsupportsStringAppend,\n\t\t} = opts\n\n\t\tconst migrations = this.schema.getMigrationsSince(serializedSchema)\n\t\tconst requiresDownMigrations = migrations.ok ? migrations.value.length > 0 : false\n\n\t\tthis.sessions.set(sessionId, {\n\t\t\tstate: RoomSessionState.Connected,\n\t\t\tsessionId,\n\t\t\tsocket,\n\t\t\tpresenceId: presenceId ?? this.presenceType?.createId() ?? null,\n\t\t\tserializedSchema,\n\t\t\trequiresDownMigrations,\n\t\t\tlastInteractionTime: Date.now(),\n\t\t\tdebounceTimer: null,\n\t\t\toutstandingDataMessages: [],\n\t\t\tmeta,\n\t\t\tisReadonly,\n\t\t\tobjectAccess: objectAccess ?? 'write',\n\t\t\trequiresLegacyRejection,\n\t\t\tsupportsStringAppend,\n\t\t})\n\n\t\tif (presenceRecord && presenceId) {\n\t\t\tthis.presenceStore.set(presenceId, presenceRecord as R)\n\t\t}\n\t}\n\n\t/**\n\t * Checks if all connected sessions support string append operations (protocol version 8+).\n\t * If any client is on an older version, returns false to enable legacy append mode.\n\t *\n\t * @returns True if all connected sessions are on protocol version 8 or higher\n\t */\n\tgetCanEmitStringAppend(): boolean {\n\t\tfor (const session of this.sessions.values()) {\n\t\t\tif (session.state === RoomSessionState.Connected) {\n\t\t\t\tif (!session.supportsStringAppend) {\n\t\t\t\t\treturn false\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn true\n\t}\n\n\t/**\n\t * When we send a diff to a client, if that client is on a lower version than us, we need to make\n\t * the diff compatible with their version. This method takes a TLSyncForwardDiff (which has full\n\t * records) and migrates all records down to the client's schema version, returning a NetworkDiff.\n\t *\n\t * For updates (entries with [before, after] tuples), both records are migrated and a patch is\n\t * computed from the migrated versions, preserving efficient patch semantics even across versions.\n\t *\n\t * If a migration fails, the session will be rejected.\n\t *\n\t * @param sessionId - The session ID (for rejection on migration failure)\n\t * @param serializedSchema - The client's schema to migrate to\n\t * @param requiresDownMigrations - Whether the client needs down migrations\n\t * @param diff - The TLSyncForwardDiff containing full records to migrate\n\t * @param unmigrated - Optional pre-computed NetworkDiff for when no migration is needed\n\t * @returns A NetworkDiff with migrated records, or a migration failure\n\t */\n\tprivate migrateDiffOrRejectSession(\n\t\tsessionId: string,\n\t\tserializedSchema: SerializedSchema,\n\t\trequiresDownMigrations: boolean,\n\t\tdiff: TLSyncForwardDiff<R>,\n\t\tunmigrated?: NetworkDiff<R>\n\t): Result<NetworkDiff<R>, MigrationFailureReason> {\n\t\tif (!requiresDownMigrations) {\n\t\t\treturn Result.ok(unmigrated ?? toNetworkDiff(diff) ?? {})\n\t\t}\n\n\t\tconst result: NetworkDiff<R> = {}\n\n\t\t// Migrate puts (either adds or updates)\n\t\tfor (const [id, put] of objectMapEntriesIterable(diff.puts)) {\n\t\t\tif (Array.isArray(put)) {\n\t\t\t\t// Update: [before, after] tuple - migrate both and compute patch\n\t\t\t\tconst [from, to] = put\n\t\t\t\tconst fromResult = this.schema.migratePersistedRecord(from, serializedSchema, 'down')\n\t\t\t\tif (fromResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(fromResult.reason)\n\t\t\t\t}\n\t\t\t\tconst toResult = this.schema.migratePersistedRecord(to, serializedSchema, 'down')\n\t\t\t\tif (toResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(toResult.reason)\n\t\t\t\t}\n\t\t\t\tconst patch = diffRecord(fromResult.value, toResult.value)\n\t\t\t\tif (patch) {\n\t\t\t\t\tresult[id] = [RecordOpType.Patch, patch]\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Add: single record - migrate and put\n\t\t\t\tconst migrationResult = this.schema.migratePersistedRecord(put, serializedSchema, 'down')\n\t\t\t\tif (migrationResult.type === 'error') {\n\t\t\t\t\tthis.rejectSession(sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t\treturn Result.err(migrationResult.reason)\n\t\t\t\t}\n\t\t\t\tresult[id] = [RecordOpType.Put, migrationResult.value]\n\t\t\t}\n\t\t}\n\n\t\t// Deletes don't need migration\n\t\tfor (const id of diff.deletes) {\n\t\t\tresult[id] = [RecordOpType.Remove]\n\t\t}\n\n\t\treturn Result.ok(result)\n\t}\n\n\t/**\n\t * Process an incoming message from a client session. Handles connection requests,\n\t * data synchronization pushes, and ping/pong for connection health.\n\t *\n\t * @param sessionId - The ID of the session that sent the message\n\t * @param message - The client message to process\n\t * @example\n\t * ```ts\n\t * // Typically called by WebSocket message handlers\n\t * websocket.onMessage((data) => {\n\t *   const message = JSON.parse(data)\n\t *   room.handleMessage(sessionId, message)\n\t * })\n\t * ```\n\t */\n\tasync handleMessage(sessionId: string, message: TLSocketClientSentEvent<R>) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) {\n\t\t\tthis.log?.warn?.('Received message from unknown session')\n\t\t\treturn\n\t\t}\n\t\ttry {\n\t\t\tswitch (message.type) {\n\t\t\t\tcase 'connect': {\n\t\t\t\t\treturn this.handleConnectRequest(session, message)\n\t\t\t\t}\n\t\t\t\tcase 'push': {\n\t\t\t\t\treturn this.handlePushRequest(session, message)\n\t\t\t\t}\n\t\t\t\tcase 'ping': {\n\t\t\t\t\tif (session.state === RoomSessionState.Connected) {\n\t\t\t\t\t\tsession.lastInteractionTime = Date.now()\n\t\t\t\t\t}\n\t\t\t\t\treturn this._unsafe_sendMessage(session.sessionId, { type: 'pong' })\n\t\t\t\t}\n\t\t\t\tdefault: {\n\t\t\t\t\texhaustiveSwitchError(message)\n\t\t\t\t}\n\t\t\t}\n\t\t} catch (e) {\n\t\t\tif (e instanceof TLSyncError) {\n\t\t\t\tthis.rejectSession(session.sessionId, e.reason)\n\t\t\t} else {\n\t\t\t\t// log error and reboot the room?\n\t\t\t\tthrow e\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Reject and disconnect a session due to incompatibility or other fatal errors.\n\t * Sends appropriate error messages before closing the connection.\n\t *\n\t * @param sessionId - The session to reject\n\t * @param fatalReason - The reason for rejection (optional)\n\t * @example\n\t * ```ts\n\t * // Reject due to version mismatch\n\t * room.rejectSession('user-123', TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t *\n\t * // Reject due to permission issue\n\t * room.rejectSession('user-456', 'Insufficient permissions')\n\t * ```\n\t */\n\trejectSession(sessionId: string, fatalReason?: TLSyncErrorCloseEventReason | string) {\n\t\tconst session = this.sessions.get(sessionId)\n\t\tif (!session) return\n\t\tif (!fatalReason) {\n\t\t\tthis.removeSession(sessionId)\n\t\t\treturn\n\t\t}\n\t\tif (session.requiresLegacyRejection) {\n\t\t\ttry {\n\t\t\t\tif (session.socket.isOpen) {\n\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\tlet legacyReason: TLIncompatibilityReason\n\t\t\t\t\tswitch (fatalReason) {\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.CLIENT_TOO_OLD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.ClientTooOld\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.SERVER_TOO_OLD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.ServerTooOld\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tcase TLSyncErrorCloseEventReason.INVALID_RECORD:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.InvalidRecord\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\tdefault:\n\t\t\t\t\t\t\t// eslint-disable-next-line @typescript-eslint/no-deprecated\n\t\t\t\t\t\t\tlegacyReason = TLIncompatibilityReason.InvalidOperation\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t}\n\t\t\t\t\tsession.socket.sendMessage({\n\t\t\t\t\t\ttype: 'incompatibility_error',\n\t\t\t\t\t\treason: legacyReason,\n\t\t\t\t\t})\n\t\t\t\t}\n\t\t\t} catch {\n\t\t\t\t// noop\n\t\t\t} finally {\n\t\t\t\tthis.removeSession(sessionId)\n\t\t\t}\n\t\t} else {\n\t\t\tthis.removeSession(sessionId, fatalReason)\n\t\t}\n\t}\n\n\tprivate forceAllReconnect() {\n\t\tfor (const session of this.sessions.values()) {\n\t\t\tthis.removeSession(session.sessionId)\n\t\t}\n\t}\n\n\tprivate broadcastChanges(txn: TLSyncStorageTransaction<R>) {\n\t\tconst changes = txn.getChangesSince(this.lastDocumentClock)\n\t\tif (!changes) return\n\t\tconst { wipeAll, diff } = changes\n\t\tthis.lastDocumentClock = txn.getClock()\n\t\tif (wipeAll) {\n\t\t\t// If this happens it means we'd need to broadcast a wipe_all message to all clients,\n\t\t\t// which is not part of the protocol yet, so we need to force all clients to reconnect instead.\n\t\t\tthis.forceAllReconnect()\n\t\t\treturn\n\t\t}\n\t\tthis.broadcastPatch(diff)\n\t}\n\n\t/**\n\t * Work out whether a client we can't reconcile schemas with is running a newer or older SDK\n\t * than us.\n\t */\n\tprivate getVersionMismatchReason(theirSchema: SerializedSchema) {\n\t\tconst ourSchema = this.serializedSchema\n\n\t\tif (theirSchema.schemaVersion > ourSchema.schemaVersion) {\n\t\t\treturn TLSyncErrorCloseEventReason.SERVER_TOO_OLD\n\t\t}\n\n\t\tif (theirSchema.schemaVersion === 2 && ourSchema.schemaVersion === 2) {\n\t\t\tfor (const [sequenceId, theirVersion] of Object.entries(theirSchema.sequences)) {\n\t\t\t\tconst ourVersion = ourSchema.sequences[sequenceId]\n\t\t\t\tif (ourVersion === undefined || theirVersion > ourVersion) {\n\t\t\t\t\treturn TLSyncErrorCloseEventReason.SERVER_TOO_OLD\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn TLSyncErrorCloseEventReason.CLIENT_TOO_OLD\n\t}\n\n\tprivate handleConnectRequest(\n\t\tsession: RoomSession<R, SessionMeta>,\n\t\tmessage: Extract<TLSocketClientSentEvent<R>, { type: 'connect' }>\n\t) {\n\t\t// if the protocol versions don't match, disconnect the client\n\t\t// we will eventually want to try to make our protocol backwards compatible to some degree\n\t\t// and have a MIN_PROTOCOL_VERSION constant that the TLSyncRoom implements support for\n\t\tlet theirProtocolVersion = message.protocolVersion\n\t\t// 5 is the same as 6\n\t\tif (theirProtocolVersion === 5) {\n\t\t\ttheirProtocolVersion = 6\n\t\t}\n\t\t// 6 is almost the same as 7\n\t\tsession.requiresLegacyRejection = theirProtocolVersion === 6\n\t\tif (theirProtocolVersion === 6) {\n\t\t\ttheirProtocolVersion++\n\t\t}\n\t\tif (theirProtocolVersion === 7) {\n\t\t\ttheirProtocolVersion++\n\t\t\tsession.supportsStringAppend = false\n\t\t}\n\n\t\tif (theirProtocolVersion == null || theirProtocolVersion < getTlsyncProtocolVersion()) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t} else if (theirProtocolVersion > getTlsyncProtocolVersion()) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.SERVER_TOO_OLD)\n\t\t\treturn\n\t\t}\n\t\t// If the client's store is at a different version to ours, it could cause corruption.\n\t\t// We should disconnect the client and ask them to refresh.\n\t\tif (message.schema == null) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t}\n\t\tconst migrations = this.schema.getMigrationsSince(message.schema)\n\t\tif (!migrations.ok) {\n\t\t\tthis.rejectSession(session.sessionId, this.getVersionMismatchReason(message.schema))\n\t\t\treturn\n\t\t}\n\t\t// The client's schema is older than ours, but we can't migrate our data down to their\n\t\t// version (a migration isn't record-scoped or has no down migration), so they're too old.\n\t\tif (migrations.value.some((m) => m.scope !== 'record' || !m.down)) {\n\t\t\tthis.rejectSession(session.sessionId, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\treturn\n\t\t}\n\n\t\tconst sessionSchema = isEqual(message.schema, this.serializedSchema)\n\t\t\t? this.serializedSchema\n\t\t\t: message.schema\n\n\t\tconst requiresDownMigrations = migrations.value.length > 0\n\n\t\tconst connect = async (msg: Extract<TLSocketServerSentEvent<R>, { type: 'connect' }>) => {\n\t\t\tthis.sessions.set(session.sessionId, {\n\t\t\t\tstate: RoomSessionState.Connected,\n\t\t\t\tsessionId: session.sessionId,\n\t\t\t\tpresenceId: session.presenceId,\n\t\t\t\tsocket: session.socket,\n\t\t\t\tserializedSchema: sessionSchema,\n\t\t\t\trequiresDownMigrations,\n\t\t\t\tlastInteractionTime: Date.now(),\n\t\t\t\tdebounceTimer: null,\n\t\t\t\toutstandingDataMessages: [],\n\t\t\t\tsupportsStringAppend: session.supportsStringAppend,\n\t\t\t\tmeta: session.meta,\n\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\tobjectAccess: session.objectAccess,\n\t\t\t\trequiresLegacyRejection: session.requiresLegacyRejection,\n\t\t\t})\n\t\t\tthis._unsafe_sendMessage(session.sessionId, msg)\n\t\t}\n\n\t\tconst { documentClock, result } = this.storage.transaction((txn) => {\n\t\t\tthis.broadcastChanges(txn)\n\t\t\tconst docChanges = txn.getChangesSince(message.lastServerClock)\n\t\t\tconst presenceDiff = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsessionSchema,\n\t\t\t\trequiresDownMigrations,\n\t\t\t\t{\n\t\t\t\t\t// Exclude the connecting session's own presence \u2014 it will push fresh\n\t\t\t\t\t// data immediately after connecting. Sending the stale record back\n\t\t\t\t\t// would leave an orphaned presence in the client's local store (the\n\t\t\t\t\t// server never echoes a session's own updates back to it).\n\t\t\t\t\tputs: Object.fromEntries(\n\t\t\t\t\t\t[...this.presenceStore.values()]\n\t\t\t\t\t\t\t.filter((p) => p.id !== session.presenceId)\n\t\t\t\t\t\t\t.map((p) => [p.id, p])\n\t\t\t\t\t),\n\t\t\t\t\tdeletes: [],\n\t\t\t\t}\n\t\t\t)\n\t\t\tif (!presenceDiff.ok) return null\n\n\t\t\t// Migrate the diff if needed, or use the pre-computed network diff\n\t\t\tlet docDiff: NetworkDiff<R> | null = null\n\t\t\tif (docChanges && sessionSchema !== this.serializedSchema) {\n\t\t\t\tconst migrated = this.migrateDiffOrRejectSession(\n\t\t\t\t\tsession.sessionId,\n\t\t\t\t\tsessionSchema,\n\t\t\t\t\trequiresDownMigrations,\n\t\t\t\t\tdocChanges.diff\n\t\t\t\t)\n\t\t\t\tif (!migrated.ok) return null\n\t\t\t\tdocDiff = migrated.value\n\t\t\t} else if (docChanges) {\n\t\t\t\tdocDiff = toNetworkDiff(docChanges.diff)\n\t\t\t}\n\t\t\treturn {\n\t\t\t\ttype: 'connect',\n\t\t\t\tconnectRequestId: message.connectRequestId,\n\t\t\t\thydrationType: docChanges?.wipeAll ? 'wipe_all' : 'wipe_presence',\n\t\t\t\tprotocolVersion: getTlsyncProtocolVersion(),\n\t\t\t\tschema: this.schema.serialize(),\n\t\t\t\tserverClock: txn.getClock(),\n\t\t\t\tdiff: { ...presenceDiff.value, ...docDiff },\n\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\tobjectAccess: session.objectAccess,\n\t\t\t} satisfies Extract<TLSocketServerSentEvent<R>, { type: 'connect' }>\n\t\t}) // no id needed because this only reads, no writes.\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tif (result) {\n\t\t\tconnect(result)\n\t\t}\n\t}\n\n\tprivate handlePushRequest(\n\t\tsession: RoomSession<R, SessionMeta> | null,\n\t\tmessage: Extract<TLSocketClientSentEvent<R>, { type: 'push' }>\n\t) {\n\t\t// We must be connected to handle push requests\n\t\tif (session && session.state !== RoomSessionState.Connected) {\n\t\t\treturn\n\t\t}\n\t\t// update the last interaction time\n\t\tif (session) {\n\t\t\tsession.lastInteractionTime = Date.now()\n\t\t}\n\n\t\tconst legacyAppendMode = !this.getCanEmitStringAppend()\n\n\t\tinterface ActualChanges {\n\t\t\tdiffs: {\n\t\t\t\tnetworkDiff: NetworkDiff<R>\n\t\t\t\tdiff: TLSyncForwardDiff<R>\n\t\t\t} | null\n\t\t}\n\n\t\tconst propagateOp = (\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\top: RecordOp<R>,\n\t\t\tbefore: R | undefined,\n\t\t\tafter: R | undefined\n\t\t) => {\n\t\t\tif (!changes.diffs) changes.diffs = { networkDiff: {}, diff: { puts: {}, deletes: [] } }\n\t\t\tchanges.diffs.networkDiff[id] = op\n\t\t\tswitch (op[0]) {\n\t\t\t\tcase RecordOpType.Put:\n\t\t\t\t\tchanges.diffs.diff.puts[id] = op[1]\n\t\t\t\t\tbreak\n\t\t\t\tcase RecordOpType.Patch:\n\t\t\t\t\tassert(before && after, 'before and after are required for patches')\n\t\t\t\t\tchanges.diffs.diff.puts[id] = [before, after]\n\t\t\t\t\tbreak\n\t\t\t\tcase RecordOpType.Remove:\n\t\t\t\t\tchanges.diffs.diff.deletes.push(id)\n\t\t\t\t\tbreak\n\t\t\t\tdefault:\n\t\t\t\t\texhaustiveSwitchError(op[0])\n\t\t\t}\n\t\t}\n\n\t\tconst addDocument = (\n\t\t\tstorage: MinimalDocStore<R>,\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\t_state: R,\n\t\t\tauthorize?: (prev: R | null, next: R) => R | null\n\t\t): Result<void, void> => {\n\t\t\tconst res = session\n\t\t\t\t? this.schema.migratePersistedRecord(_state, session.serializedSchema, 'up')\n\t\t\t\t: { type: 'success' as const, value: _state }\n\t\t\tif (res.type === 'error') {\n\t\t\t\tthrow new TLSyncError(res.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t}\n\t\t\tlet { value: state } = res\n\n\t\t\t// Get the existing document, if any\n\t\t\tconst doc = storage.get(id) as R | undefined\n\n\t\t\t// Authorize on the up-migrated record; on create the authorizer's return is stored as-is,\n\t\t\t// so no later migration can clobber stamped fields.\n\t\t\tif (authorize) {\n\t\t\t\tconst result = authorize(doc ?? null, state)\n\t\t\t\tif (!result) return Result.ok(undefined) // vetoed: skip the op, the client self-corrects\n\t\t\t\tif (!doc) state = result // create: store the authorizer's (stamped) record\n\t\t\t}\n\n\t\t\tif (doc) {\n\t\t\t\t// If there's an existing document, replace it with the new state\n\t\t\t\t// but propagate a diff rather than the entire value\n\t\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, doc.typeName))\n\t\t\t\tconst diff = diffAndValidateRecord(doc, state, recordType)\n\t\t\t\tif (diff) {\n\t\t\t\t\tstorage.set(id, state)\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff], doc, state)\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Otherwise, if we don't already have a document with this id\n\t\t\t\t// create the document and propagate the put op\n\t\t\t\t// set automatically clears tombstones if they exist\n\t\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, state.typeName))\n\t\t\t\tvalidateRecord(state, recordType)\n\t\t\t\tstorage.set(id, state)\n\t\t\t\tpropagateOp(changes, id, [RecordOpType.Put, state], undefined, undefined)\n\t\t\t}\n\n\t\t\treturn Result.ok(undefined)\n\t\t}\n\n\t\tconst patchDocument = (\n\t\t\tstorage: MinimalDocStore<R>,\n\t\t\tchanges: ActualChanges,\n\t\t\tid: string,\n\t\t\tpatch: ObjectDiff,\n\t\t\tauthorize?: (prev: R, next: R) => R | null\n\t\t) => {\n\t\t\t// if it was already deleted, there's no need to apply the patch\n\t\t\tconst doc = storage.get(id) as R | undefined\n\t\t\tif (!doc) return\n\n\t\t\tconst recordType = assertExists(getOwnProperty(this.schema.types, doc.typeName))\n\t\t\t// If the client's version of the record is older than ours,\n\t\t\t// we apply the patch to the downgraded version of the record\n\t\t\tconst downgraded = session\n\t\t\t\t? this.schema.migratePersistedRecord(doc, session.serializedSchema, 'down')\n\t\t\t\t: { type: 'success' as const, value: doc }\n\t\t\tif (downgraded.type === 'error') {\n\t\t\t\tthrow new TLSyncError(downgraded.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t}\n\n\t\t\tif (downgraded.value === doc) {\n\t\t\t\t// If the versions are compatible, apply the patch and propagate the patch op\n\t\t\t\tconst diff = applyAndDiffRecord(doc, patch, recordType, legacyAppendMode)\n\t\t\t\tif (diff) {\n\t\t\t\t\t// Authorize on the committed candidate \u2014 the record that will actually be stored.\n\t\t\t\t\tif (authorize && !authorize(doc, diff[1])) return\n\t\t\t\t\tstorage.set(id, diff[1])\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff[0]], doc, diff[1])\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// need to apply the patch to the downgraded version and then upgrade it\n\n\t\t\t\t// apply the patch to the downgraded version\n\t\t\t\tconst patched = applyObjectDiff(downgraded.value, patch)\n\t\t\t\t// then upgrade the patched version and use that as the new state\n\t\t\t\tconst upgraded = session\n\t\t\t\t\t? this.schema.migratePersistedRecord(patched, session.serializedSchema, 'up')\n\t\t\t\t\t: { type: 'success' as const, value: patched }\n\t\t\t\t// If the client's version is too old, we'll hit an error\n\t\t\t\tif (upgraded.type === 'error') {\n\t\t\t\t\tthrow new TLSyncError(upgraded.reason, TLSyncErrorCloseEventReason.CLIENT_TOO_OLD)\n\t\t\t\t}\n\t\t\t\t// replace the state with the upgraded version and propagate the patch op\n\t\t\t\tconst diff = diffAndValidateRecord(doc, upgraded.value, recordType, legacyAppendMode)\n\t\t\t\tif (diff) {\n\t\t\t\t\t// Authorize on the committed candidate \u2014 the upgraded record, not a raw preview.\n\t\t\t\t\tif (authorize && !authorize(doc, upgraded.value)) return\n\t\t\t\t\tstorage.set(id, upgraded.value)\n\t\t\t\t\tpropagateOp(changes, id, [RecordOpType.Patch, diff], doc, upgraded.value)\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tconst { result, documentClock, changes } = this.storage.transaction(\n\t\t\t(txn) => {\n\t\t\t\tthis.broadcastChanges(txn)\n\t\t\t\t// collect actual ops that resulted from the push\n\t\t\t\t// these will be broadcast to other users\n\n\t\t\t\tconst docChanges: ActualChanges = { diffs: null }\n\t\t\t\tconst presenceChanges: ActualChanges = { diffs: null }\n\n\t\t\t\tif (this.presenceType && session?.presenceId && 'presence' in message && message.presence) {\n\t\t\t\t\tif (!session) throw new Error('session is required for presence pushes')\n\t\t\t\t\t// The push request was for the presence scope.\n\t\t\t\t\tconst id = session.presenceId\n\t\t\t\t\tconst [type, val] = message.presence\n\t\t\t\t\tconst { typeName } = this.presenceType\n\t\t\t\t\tswitch (type) {\n\t\t\t\t\t\tcase RecordOpType.Put: {\n\t\t\t\t\t\t\t// Try to put the document. If it fails, stop here.\n\t\t\t\t\t\t\taddDocument(this.presenceStore, presenceChanges, id, {\n\t\t\t\t\t\t\t\t...val,\n\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\ttypeName,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t}\n\t\t\t\t\t\tcase RecordOpType.Patch: {\n\t\t\t\t\t\t\t// Try to patch the document. If it fails, stop here.\n\t\t\t\t\t\t\tpatchDocument(this.presenceStore, presenceChanges, id, {\n\t\t\t\t\t\t\t\t...val,\n\t\t\t\t\t\t\t\tid: [ValueOpType.Put, id],\n\t\t\t\t\t\t\t\ttypeName: [ValueOpType.Put, typeName],\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\t// Per-op write gate: document-lane records are gated by `isReadonly`, object-lane\n\t\t\t\t// records by `objectAccess`. Denied ops are skipped (the client is corrected by the\n\t\t\t\t// resulting discard/rebase push_result, exactly as whole-diff readonly skips were).\n\t\t\t\t// Server-initiated pushes (no session) are always allowed.\n\t\t\t\tconst canWrite = (typeName: string) =>\n\t\t\t\t\t!session ||\n\t\t\t\t\t(this.objectTypes.has(typeName) ? session.objectAccess !== 'read' : !session.isReadonly)\n\n\t\t\t\tif (message.diff) {\n\t\t\t\t\t// The push request was for the document scope.\n\t\t\t\t\tfor (const [id, op] of objectMapEntriesIterable(message.diff!)) {\n\t\t\t\t\t\tswitch (op[0]) {\n\t\t\t\t\t\t\tcase RecordOpType.Put: {\n\t\t\t\t\t\t\t\t// The write gate is checked before type validation so that a denied\n\t\t\t\t\t\t\t\t// session's ops are skipped without rejection, matching the previous\n\t\t\t\t\t\t\t\t// whole-diff readonly behavior.\n\t\t\t\t\t\t\t\tif (!canWrite(op[1].typeName)) continue\n\t\t\t\t\t\t\t\t// Try to add the document.\n\t\t\t\t\t\t\t\t// If we're putting a record with a type that we don't recognize, fail\n\t\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\t\t!this.documentTypes.has(op[1].typeName) &&\n\t\t\t\t\t\t\t\t\t!this.objectTypes.has(op[1].typeName)\n\t\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\t\tthrow new TLSyncError(\n\t\t\t\t\t\t\t\t\t\t'invalid record',\n\t\t\t\t\t\t\t\t\t\tTLSyncErrorCloseEventReason.INVALID_RECORD\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tconst record = op[1]\n\t\t\t\t\t\t\t\t// A put must not change the record's typeName. Two reasons, and the first\n\t\t\t\t\t\t\t\t// applies whether or not authorizers are configured: the write gate above\n\t\t\t\t\t\t\t\t// keyed off the *incoming* typeName, so a swap between lanes (document <->\n\t\t\t\t\t\t\t\t// object) would let a session denied on one lane write through the other by\n\t\t\t\t\t\t\t\t// relabeling an existing record. The second is that the authorizer lookup\n\t\t\t\t\t\t\t\t// also keys off the incoming typeName while the replace path validates\n\t\t\t\t\t\t\t\t// against the stored one, so a swap would consult the wrong authorizer (or\n\t\t\t\t\t\t\t\t// none). Skip it like a veto; the client self-corrects.\n\t\t\t\t\t\t\t\tconst prevRecord = session ? ((txn.get(id) as R | undefined) ?? null) : null\n\t\t\t\t\t\t\t\tif (session && prevRecord && prevRecord.typeName !== record.typeName) {\n\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t'skipping put that changes typeName',\n\t\t\t\t\t\t\t\t\t\t`${prevRecord.typeName} -> ${record.typeName}`,\n\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t// Per-type authorizer: stamp/veto the write from the session's identity.\n\t\t\t\t\t\t\t\t// Client pushes only; runs inside `addDocument`, on the up-migrated record.\n\t\t\t\t\t\t\t\tlet authorize: ((prev: R | null, next: R) => R | null) | undefined\n\t\t\t\t\t\t\t\tif (session && this.authorizeRecord) {\n\t\t\t\t\t\t\t\t\tconst authorizePut = this.authorizerFor(record.typeName)\n\t\t\t\t\t\t\t\t\tif (authorizePut) {\n\t\t\t\t\t\t\t\t\t\tauthorize = (prevRec, next) => {\n\t\t\t\t\t\t\t\t\t\t\tconst result = authorizePut(\n\t\t\t\t\t\t\t\t\t\t\t\tprevRec\n\t\t\t\t\t\t\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsession: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsessionId: session.sessionId,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tmeta: session.meta,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: 'update',\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tprev: prevRec,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsession: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tsessionId: session.sessionId,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tmeta: session.meta,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: 'create',\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tprev: null,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\tif (!result) {\n\t\t\t\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t\t\t\t'authorizer vetoed put',\n\t\t\t\t\t\t\t\t\t\t\t\t\trecord.typeName,\n\t\t\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\t\treturn null\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t// create: store the stamped record; update: allow/veto only\n\t\t\t\t\t\t\t\t\t\t\treturn prevRec ? next : result\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\taddDocument(txn, docChanges, id, record, authorize)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcase RecordOpType.Patch: {\n\t\t\t\t\t\t\t\tconst doc = txn.get(id) as R | undefined\n\t\t\t\t\t\t\t\t// if it was already deleted, there's no need to apply the patch\n\t\t\t\t\t\t\t\tif (!doc) continue\n\t\t\t\t\t\t\t\tif (!canWrite(doc.typeName)) continue\n\t\t\t\t\t\t\t\t// Per-type authorizer (update, allow/veto only): runs inside `patchDocument`\n\t\t\t\t\t\t\t\t// on the committed candidate, never on a raw client-version preview.\n\t\t\t\t\t\t\t\tconst authorizePatch = session && this.authorizerFor(doc.typeName)\n\t\t\t\t\t\t\t\tconst authorize = authorizePatch\n\t\t\t\t\t\t\t\t\t? (prev: R, next: R) => {\n\t\t\t\t\t\t\t\t\t\t\tconst result = authorizePatch({\n\t\t\t\t\t\t\t\t\t\t\t\tsession: {\n\t\t\t\t\t\t\t\t\t\t\t\t\tsessionId: session.sessionId,\n\t\t\t\t\t\t\t\t\t\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\t\t\t\t\t\t\t\t\t\tmeta: session.meta,\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\ttype: 'update',\n\t\t\t\t\t\t\t\t\t\t\t\tprev,\n\t\t\t\t\t\t\t\t\t\t\t\tnext,\n\t\t\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t\t\t\tif (!result) {\n\t\t\t\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t\t\t\t'authorizer vetoed patch',\n\t\t\t\t\t\t\t\t\t\t\t\t\tdoc.typeName,\n\t\t\t\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\treturn result\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t: undefined\n\t\t\t\t\t\t\t\t// Try to patch the document. If it fails, stop here.\n\t\t\t\t\t\t\t\tpatchDocument(txn, docChanges, id, op[1], authorize)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcase RecordOpType.Remove: {\n\t\t\t\t\t\t\t\tconst doc = txn.get(id) as R | undefined\n\t\t\t\t\t\t\t\tif (!doc) {\n\t\t\t\t\t\t\t\t\t// If the doc was already deleted, don't do anything, no need to propagate a delete op\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tif (!canWrite(doc.typeName)) continue\n\t\t\t\t\t\t\t\t// Per-type authorizer (delete): veto deletes the session isn't allowed to make,\n\t\t\t\t\t\t\t\t// e.g. deleting someone else's comment. Allow/veto only.\n\t\t\t\t\t\t\t\tconst authorizeRemove = session && this.authorizerFor(doc.typeName)\n\t\t\t\t\t\t\t\tif (\n\t\t\t\t\t\t\t\t\tauthorizeRemove &&\n\t\t\t\t\t\t\t\t\t!authorizeRemove({\n\t\t\t\t\t\t\t\t\t\tsession: {\n\t\t\t\t\t\t\t\t\t\t\tsessionId: session.sessionId,\n\t\t\t\t\t\t\t\t\t\t\tisReadonly: session.isReadonly,\n\t\t\t\t\t\t\t\t\t\t\tmeta: session.meta,\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\ttype: 'delete',\n\t\t\t\t\t\t\t\t\t\tprev: doc,\n\t\t\t\t\t\t\t\t\t\tnext: null,\n\t\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t\t) {\n\t\t\t\t\t\t\t\t\tthis.log?.warn?.(\n\t\t\t\t\t\t\t\t\t\t'authorizer vetoed delete',\n\t\t\t\t\t\t\t\t\t\tdoc.typeName,\n\t\t\t\t\t\t\t\t\t\tid,\n\t\t\t\t\t\t\t\t\t\t'session:',\n\t\t\t\t\t\t\t\t\t\tsession.sessionId\n\t\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t}\n\n\t\t\t\t\t\t\t\t// Delete the document and propagate the delete op\n\t\t\t\t\t\t\t\t// delete automatically creates tombstones\n\t\t\t\t\t\t\t\ttxn.delete(id)\n\t\t\t\t\t\t\t\tpropagateOp(docChanges, id, op, doc, undefined)\n\t\t\t\t\t\t\t\tbreak\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\treturn { docChanges, presenceChanges }\n\t\t\t},\n\t\t\t{ id: this.internalTxnId, emitChanges: 'when-different' }\n\t\t)\n\n\t\tthis.lastDocumentClock = documentClock\n\n\t\tlet pushResult: TLSocketServerSentEvent<R> | undefined\n\t\tif (changes && session) {\n\t\t\t// txn did not apply verbatim so we should broadcast the actual changes\n\t\t\tresult.docChanges.diffs = { networkDiff: toNetworkDiff(changes) ?? {}, diff: changes }\n\t\t}\n\n\t\tif (isEqual(result.docChanges.diffs?.networkDiff, message.diff)) {\n\t\t\tpushResult = {\n\t\t\t\ttype: 'push_result',\n\t\t\t\tclientClock: message.clientClock,\n\t\t\t\tserverClock: documentClock,\n\t\t\t\taction: 'commit',\n\t\t\t}\n\t\t} else if (!result.docChanges.diffs?.networkDiff) {\n\t\t\tpushResult = {\n\t\t\t\ttype: 'push_result',\n\t\t\t\tclientClock: message.clientClock,\n\t\t\t\tserverClock: documentClock,\n\t\t\t\taction: 'discard',\n\t\t\t}\n\t\t} else if (session) {\n\t\t\t// if recordsDiff is null but diff is not, then there are no clients that need down migrations\n\t\t\t// so we can just use the diff directly\n\t\t\tconst diff = this.migrateDiffOrRejectSession(\n\t\t\t\tsession.sessionId,\n\t\t\t\tsession.serializedSchema,\n\t\t\t\tsession.requiresDownMigrations,\n\t\t\t\tresult.docChanges.diffs.diff,\n\t\t\t\tresult.docChanges.diffs.networkDiff\n\t\t\t)\n\t\t\tif (diff.ok) {\n\t\t\t\tpushResult = {\n\t\t\t\t\ttype: 'push_result',\n\t\t\t\t\tclientClock: message.clientClock,\n\t\t\t\t\tserverClock: documentClock,\n\t\t\t\t\taction: { rebaseWithDiff: diff.value },\n\t\t\t\t}\n\t\t\t}\n\t\t\t// if the difff was not ok then the session was rejected and it's ok to continue without a push result\n\t\t}\n\n\t\tif (session && pushResult) {\n\t\t\tthis._unsafe_sendMessage(session.sessionId, pushResult)\n\t\t}\n\t\tif (result.docChanges.diffs || result.presenceChanges.diffs) {\n\t\t\tthis.broadcastPatch(\n\t\t\t\t{\n\t\t\t\t\tputs: {\n\t\t\t\t\t\t...result.docChanges.diffs?.diff.puts,\n\t\t\t\t\t\t...result.presenceChanges.diffs?.diff.puts,\n\t\t\t\t\t},\n\t\t\t\t\tdeletes: [\n\t\t\t\t\t\t...(result.docChanges.diffs?.diff.deletes ?? []),\n\t\t\t\t\t\t...(result.presenceChanges.diffs?.diff.deletes ?? []),\n\t\t\t\t\t],\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\t...result.docChanges.diffs?.networkDiff,\n\t\t\t\t\t...result.presenceChanges.diffs?.networkDiff,\n\t\t\t\t},\n\t\t\t\tsession?.sessionId\n\t\t\t)\n\t\t}\n\n\t\tif (result.presenceChanges.diffs) {\n\t\t\tqueueMicrotask(() => {\n\t\t\t\tthis.onPresenceChange?.()\n\t\t\t})\n\t\t}\n\n\t\tif (result.docChanges.diffs && this.onCommittedChanges) {\n\t\t\tconst diff = result.docChanges.diffs.diff\n\t\t\tqueueMicrotask(() => {\n\t\t\t\ttry {\n\t\t\t\t\tthis.onCommittedChanges?.({ diff, documentClock })\n\t\t\t\t} catch (e) {\n\t\t\t\t\tthis.log?.error?.('onCommittedChanges threw', e)\n\t\t\t\t}\n\t\t\t})\n\t\t}\n\t}\n\n\t/**\n\t * Handle the event when a client disconnects. Cleans up the session and\n\t * removes any presence information.\n\t *\n\t * @param sessionId - The session that disconnected\n\t * @example\n\t * ```ts\n\t * websocket.onClose(() => {\n\t *   room.handleClose(sessionId)\n\t * })\n\t * ```\n\t */\n\thandleClose(sessionId: string) {\n\t\tthis.cancelSession(sessionId)\n\t}\n}\n\n/** @internal */\nexport interface MinimalDocStore<R extends UnknownRecord> {\n\tget(id: string): UnknownRecord | undefined\n\tset(id: string, record: R): void\n\tdelete(id: string): void\n}\n\n/** @internal */\nexport class PresenceStore<R extends UnknownRecord> implements MinimalDocStore<R> {\n\tprivate readonly presences = new AtomMap<string, R>('presences')\n\n\tget(id: string): UnknownRecord | undefined {\n\t\treturn this.presences.get(id)\n\t}\n\n\tset(id: string, state: R): void {\n\t\tthis.presences.set(id, state)\n\t}\n\n\tdelete(id: string): void {\n\t\tthis.presences.delete(id)\n\t}\n\n\tvalues() {\n\t\treturn this.presences.values()\n\t}\n}\n"],
+  "mappings": "AAAA;AAAA,EACC;AAAA,OAMM;AACP;AAAA,EACC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACM;AACP,SAAS,wBAAwB;AACjC;AAAA,EACC;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,OACM;AACP,SAAS,gBAAgB;AACzB;AAAA,EACC;AAAA,EACA;AAAA,OAKM;AACP,SAAS,oBAAoB,uBAAuB,sBAAsB;AAC1E;AAAA,EAEC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACM;AAEP,SAAS,aAAa,2BAA2B,mCAAmC;AACpF;AAAA,EAIC;AAAA,OACM;AAiCA,MAAM,iCAAiC,MAAO;AAErD,MAAM,YAAY,CAAC,SAAiB,KAAK,IAAI,IAAI;AA2H1C,MAAM,WAAiD;AAAA;AAAA,EAEpD,WAAW,oBAAI,IAAyC;AAAA,EAEzD,oBAAoB;AAAA,EAEpB,aAAmD;AAAA,EAE3D,gBAAgB,SAAS,MAAM;AAC9B,QAAI,KAAK,YAAY;AACpB,mBAAa,KAAK,UAAU;AAC5B,WAAK,aAAa;AAAA,IACnB;AACA,eAAW,UAAU,KAAK,SAAS,OAAO,GAAG;AAC5C,cAAQ,OAAO,OAAO;AAAA,QACrB,KAAK,iBAAiB,WAAW;AAChC,gBAAM,cAAc,UAAU,OAAO,mBAAmB,IAAI,KAAK;AACjE,cAAI,eAAe,CAAC,OAAO,OAAO,QAAQ;AACzC,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC;AACA;AAAA,QACD;AAAA,QACA,KAAK,iBAAiB,wBAAwB;AAC7C,gBAAM,cAAc,UAAU,OAAO,gBAAgB,IAAI;AACzD,cAAI,eAAe,CAAC,OAAO,OAAO,QAAQ;AAEzC,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC,OAAO;AACN,iBAAK,sBAAsB;AAAA,UAC5B;AACA;AAAA,QACD;AAAA,QACA,KAAK,iBAAiB,iBAAiB;AACtC,gBAAM,cAAc,UAAU,OAAO,gBAAgB,IAAI;AACzD,cAAI,aAAa;AAChB,iBAAK,cAAc,OAAO,SAAS;AAAA,UACpC,OAAO;AACN,iBAAK,sBAAsB;AAAA,UAC5B;AACA;AAAA,QACD;AAAA,QACA,SAAS;AACR,gCAAsB,MAAM;AAAA,QAC7B;AAAA,MACD;AAAA,IACD;AAAA,EACD,GAAG,GAAI;AAAA,EAEC,wBAAwB;AAC/B,QAAI,KAAK,WAAY;AACrB,SAAK,aAAa,WAAW,KAAK,eAAe,4BAA4B,GAAG;AAAA,EACjF;AAAA,EAES,gBAAgB,IAAI,cAAiB;AAAA,EAEtC,cAAiC,CAAC;AAAA,EAElC,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpB,QAAQ;AACP,SAAK,YAAY,QAAQ,CAAC,MAAM,EAAE,CAAC;AACnC,SAAK,SAAS,QAAQ,CAAC,YAAY;AAClC,cAAQ,OAAO,MAAM;AAAA,IACtB,CAAC;AACD,SAAK,YAAY;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW;AACV,WAAO,KAAK;AAAA,EACb;AAAA,EAES,SAAS,iBAGf;AAAA;AAAA,EAGc;AAAA,EAER;AAAA,EAEA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EACA;AAAA,EACD;AAAA,EACQ;AAAA,EAGC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQT,cAAc,UAAyE;AAC9F,UAAM,YAAY,KAAK,kBAAkB,QAAQ;AAGjD,QAAI,CAAC,UAAW,QAAO;AAIvB,WAAO,CAAC,SAAS;AAChB,UAAI;AACH,eAAO,UAAU,IAAI;AAAA,MACtB,SAAS,GAAG;AACX,aAAK,KAAK,QAAQ,gDAAgD,CAAC;AACnE,eAAO;AAAA,MACR;AAAA,IACD;AAAA,EACD;AAAA,EAEA,YAAY,MAwBT;AACF,SAAK,SAAS,KAAK;AACnB,SAAK,MAAM,KAAK;AAChB,SAAK,mBAAmB,KAAK;AAC7B,SAAK,qBAAqB,KAAK;AAC/B,SAAK,kBAAkB,KAAK;AAC5B,SAAK,UAAU,KAAK;AACpB,SAAK,qBAAqB,KAAK,iBAAiB;AAEhD;AAAA,MACC;AAAA,MACA;AAAA,IAED;AAGA,SAAK,mBAAmB,KAAK,MAAM,KAAK,UAAU,KAAK,OAAO,UAAU,CAAC,CAAC;AAE1E,SAAK,cAAc,IAAI,IAAI,KAAK,eAAe,CAAC,CAAC;AACjD,eAAW,YAAY,KAAK,aAAa;AACxC,YAAM,OAAO,eAAe,KAAK,OAAO,OAAO,QAAQ;AACvD,aAAO,MAAM,4BAA4B,QAAQ,mCAAmC;AACpF;AAAA,QACC,KAAK,UAAU;AAAA,QACf,4BAA4B,QAAQ,sCAAsC,KAAK,KAAK;AAAA,MACrF;AAAA,IACD;AAGA,SAAK,gBAAgB,IAAI;AAAA,MACxB,OAAO,OAA2B,KAAK,OAAO,KAAK,EACjD,OAAO,CAAC,MAAM,EAAE,UAAU,cAAc,CAAC,KAAK,YAAY,IAAI,EAAE,QAAQ,CAAC,EACzE,IAAI,CAAC,MAAM,EAAE,QAAQ;AAAA,IACxB;AAEA,UAAM,gBAAgB,IAAI;AAAA,MACzB,OAAO,OAA2B,KAAK,OAAO,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,UAAU;AAAA,IAC1F;AAEA,QAAI,cAAc,OAAO,GAAG;AAC3B,YAAM,IAAI;AAAA,QACT,wEAAwE,cAAc,IAAI;AAAA,MAC3F;AAAA,IACD;AAEA,SAAK,eAAe,cAAc,OAAO,EAAE,KAAK,GAAG,SAAS;AAI5D,QAAI,KAAK,gBAAgB,KAAK,iBAAiB;AAC9C;AAAA,QACC,CAAC,eAAe,KAAK,iBAAiB,KAAK,aAAa,QAAQ;AAAA,QAChE,gCAAgC,KAAK,aAAa,QAAQ;AAAA,MAC3D;AAAA,IACD;AAEA,UAAM,EAAE,cAAc,IAAI,KAAK,QAAQ,YAAY,CAAC,QAAQ;AAC3D,WAAK,OAAO,eAAe,GAAG;AAAA,IAC/B,CAAC;AAED,SAAK,oBAAoB;AAEzB,SAAK,YAAY;AAAA,MAChB,KAAK,QAAQ,SAAS,CAAC,EAAE,GAAG,MAAM;AACjC,YAAI,OAAO,KAAK,eAAe;AAC9B,eAAK,gCAAgC;AAAA,QACtC;AAAA,MACD,CAAC;AAAA,IACF;AAEA,SAAK,YAAY,KAAK,MAAM;AAC3B,WAAK,cAAc,OAAO;AAC1B,UAAI,KAAK,YAAY;AACpB,qBAAa,KAAK,UAAU;AAC5B,aAAK,aAAa;AAAA,MACnB;AAAA,IACD,CAAC;AAOD,QAAI,OAAO,SAAS,KAAK,kBAAkB,KAAK,KAAK,qBAAqB,GAAG;AAC5E,YAAM,kBAAkB,KAAK,IAAI,KAAM,KAAK,MAAM,KAAK,qBAAqB,CAAC,CAAC;AAC9E,WAAK,YAAY,KAAK,SAAS,MAAM,KAAK,cAAc,GAAG,eAAe,CAAC;AAAA,IAC5E;AAAA,EACD;AAAA,EACQ,kCAAkC;AACzC,SAAK,QAAQ,YAAY,CAAC,QAAQ;AACjC,WAAK,iBAAiB,GAAG;AACzB,WAAK,oBAAoB,IAAI,SAAS;AAAA,IACvC,CAAC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,oBACP,WACA,SACC;AACD,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,4CAA4C,QAAQ,IAAI;AACzE;AAAA,IACD;AACA,QAAI,QAAQ,UAAU,iBAAiB,WAAW;AACjD,WAAK,KAAK,OAAO,gDAAgD,QAAQ,IAAI;AAC7E;AAAA,IACD;AACA,QAAI,QAAQ,OAAO,QAAQ;AAC1B,UAAI,QAAQ,SAAS,WAAW,QAAQ,SAAS,eAAe;AAE/D,YAAI,QAAQ,SAAS,QAAQ;AAG5B,eAAK,mBAAmB,SAAS;AAAA,QAClC;AACA,gBAAQ,OAAO,YAAY,OAAO;AAAA,MACnC,OAAO;AACN,YAAI,QAAQ,kBAAkB,MAAM;AAEnC,kBAAQ,OAAO,YAAY,EAAE,MAAM,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;AAE5D,kBAAQ,gBAAgB;AAAA,YACvB,MAAM,KAAK,mBAAmB,SAAS;AAAA,YACvC;AAAA,UACD;AAAA,QACD,OAAO;AACN,kBAAQ,wBAAwB,KAAK,OAAO;AAAA,QAC7C;AAAA,MACD;AAAA,IACD,OAAO;AACN,WAAK,cAAc,QAAQ,SAAS;AAAA,IACrC;AAAA,EACD;AAAA;AAAA;AAAA,EAIA,mBAAmB,WAAmB;AACrC,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAE3C,QAAI,CAAC,WAAW,QAAQ,UAAU,iBAAiB,WAAW;AAC7D;AAAA,IACD;AAEA,YAAQ,gBAAgB;AAExB,QAAI,QAAQ,wBAAwB,SAAS,GAAG;AAG/C,YAAM,OAAO,QAAQ;AACrB,cAAQ,0BAA0B,CAAC;AACnC,cAAQ,OAAO,YAAY,EAAE,MAAM,QAAQ,KAAK,CAAC;AAAA,IAClD;AAAA,EACD;AAAA;AAAA,EAGQ,cAAc,WAAmB,aAAsB;AAC9D,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,iCAAiC;AAClD;AAAA,IACD;AAEA,SAAK,SAAS,OAAO,SAAS;AAE9B,QAAI;AACH,UAAI,aAAa;AAChB,gBAAQ,OAAO,MAAM,2BAA2B,WAAW;AAAA,MAC5D,OAAO;AACN,gBAAQ,OAAO,MAAM;AAAA,MACtB;AAAA,IACD,QAAQ;AAAA,IAER;AAEA,UAAM,WAAW,KAAK,cAAc,IAAI,QAAQ,cAAc,EAAE;AAChE,QAAI,UAAU;AACb,WAAK,cAAc,OAAO,QAAQ,UAAW;AAE7C,WAAK,eAAe;AAAA,QACnB,MAAM,CAAC;AAAA,QACP,SAAS,CAAC,QAAQ,UAAW;AAAA,MAC9B,CAAC;AAAA,IACF;AAEA,SAAK,OAAO,KAAK,mBAAmB,EAAE,WAAW,MAAM,QAAQ,KAAK,CAAC;AACrE,QAAI,KAAK,SAAS,SAAS,GAAG;AAC7B,WAAK,OAAO,KAAK,mBAAmB;AAAA,IACrC;AAAA,EACD;AAAA,EAEQ,cAAc,WAAmB;AACxC,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb;AAAA,IACD;AAEA,QAAI,QAAQ,UAAU,iBAAiB,iBAAiB;AACvD,WAAK,KAAK,OAAO,0DAA0D;AAC3E;AAAA,IACD;AAEA,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,iBAAiB;AAAA,MACxB;AAAA,MACA,YAAY,QAAQ;AAAA,MACpB,QAAQ,QAAQ;AAAA,MAChB,kBAAkB,KAAK,IAAI;AAAA,MAC3B,MAAM,QAAQ;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,cAAc,QAAQ;AAAA,MACtB,yBAAyB,QAAQ;AAAA,MACjC,sBAAsB,QAAQ;AAAA,IAC/B,CAAC;AAED,QAAI;AACH,cAAQ,OAAO,MAAM;AAAA,IACtB,QAAQ;AAAA,IAER;AAEA,SAAK,sBAAsB;AAAA,EAC5B;AAAA,EAES,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUjB,eACP,MACA,aACA,iBACC;AAED,UAAM,aAAa,eAAe,cAAc,IAAI;AACpD,QAAI,CAAC,WAAY,QAAO;AAExB,SAAK,SAAS,QAAQ,CAAC,YAAY;AAClC,UAAI,QAAQ,UAAU,iBAAiB,UAAW;AAClD,UAAI,oBAAoB,QAAQ,UAAW;AAC3C,UAAI,CAAC,QAAQ,OAAO,QAAQ;AAC3B,aAAK,cAAc,QAAQ,SAAS;AACpC;AAAA,MACD;AAEA,YAAM,aAAa,KAAK;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR;AAAA,MACD;AACA,UAAI,CAAC,WAAW,GAAI;AAEpB,WAAK,oBAAoB,QAAQ,WAAW;AAAA,QAC3C,MAAM;AAAA,QACN,MAAM,WAAW;AAAA,QACjB,aAAa,KAAK;AAAA,MACnB,CAAC;AAAA,IACF,CAAC;AACD,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,kBAAkB,WAAmB,MAAiB;AACrD,SAAK,oBAAoB,WAAW,EAAE,MAAM,UAAU,KAAK,CAAC;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,iBAAiB,MAMd;AACF,UAAM,EAAE,WAAW,QAAQ,MAAM,YAAY,aAAa,IAAI;AAC9D,UAAM,WAAW,KAAK,SAAS,IAAI,SAAS;AAC5C,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,iBAAiB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,YAAY,UAAU,cAAc,KAAK,cAAc,SAAS,KAAK;AAAA,MACrE,kBAAkB,KAAK,IAAI;AAAA,MAC3B;AAAA,MACA,YAAY,cAAc;AAAA,MAC1B,cAAc,gBAAgB;AAAA;AAAA,MAE9B,yBAAyB;AAAA,MACzB,sBAAsB;AAAA,IACvB,CAAC;AACD,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,qBAAqB,MAWlB;AACF,UAAM;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACD,IAAI;AAEJ,UAAM,aAAa,KAAK,OAAO,mBAAmB,gBAAgB;AAClE,UAAM,yBAAyB,WAAW,KAAK,WAAW,MAAM,SAAS,IAAI;AAE7E,SAAK,SAAS,IAAI,WAAW;AAAA,MAC5B,OAAO,iBAAiB;AAAA,MACxB;AAAA,MACA;AAAA,MACA,YAAY,cAAc,KAAK,cAAc,SAAS,KAAK;AAAA,MAC3D;AAAA,MACA;AAAA,MACA,qBAAqB,KAAK,IAAI;AAAA,MAC9B,eAAe;AAAA,MACf,yBAAyB,CAAC;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,cAAc,gBAAgB;AAAA,MAC9B;AAAA,MACA;AAAA,IACD,CAAC;AAED,QAAI,kBAAkB,YAAY;AACjC,WAAK,cAAc,IAAI,YAAY,cAAmB;AAAA,IACvD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,yBAAkC;AACjC,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC7C,UAAI,QAAQ,UAAU,iBAAiB,WAAW;AACjD,YAAI,CAAC,QAAQ,sBAAsB;AAClC,iBAAO;AAAA,QACR;AAAA,MACD;AAAA,IACD;AACA,WAAO;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBQ,2BACP,WACA,kBACA,wBACA,MACA,YACiD;AACjD,QAAI,CAAC,wBAAwB;AAC5B,aAAO,OAAO,GAAG,cAAc,cAAc,IAAI,KAAK,CAAC,CAAC;AAAA,IACzD;AAEA,UAAM,SAAyB,CAAC;AAGhC,eAAW,CAAC,IAAI,GAAG,KAAK,yBAAyB,KAAK,IAAI,GAAG;AAC5D,UAAI,MAAM,QAAQ,GAAG,GAAG;AAEvB,cAAM,CAAC,MAAM,EAAE,IAAI;AACnB,cAAM,aAAa,KAAK,OAAO,uBAAuB,MAAM,kBAAkB,MAAM;AACpF,YAAI,WAAW,SAAS,SAAS;AAChC,eAAK,cAAc,WAAW,4BAA4B,cAAc;AACxE,iBAAO,OAAO,IAAI,WAAW,MAAM;AAAA,QACpC;AACA,cAAM,WAAW,KAAK,OAAO,uBAAuB,IAAI,kBAAkB,MAAM;AAChF,YAAI,SAAS,SAAS,SAAS;AAC9B,eAAK,cAAc,WAAW,4BAA4B,cAAc;AACxE,iBAAO,OAAO,IAAI,SAAS,MAAM;AAAA,QAClC;AACA,cAAM,QAAQ,WAAW,WAAW,OAAO,SAAS,KAAK;AACzD,YAAI,OAAO;AACV,iBAAO,EAAE,IAAI,CAAC,aAAa,OAAO,KAAK;AAAA,QACxC;AAAA,MACD,OAAO;AAEN,cAAM,kBAAkB,KAAK,OAAO,uBAAuB,KAAK,kBAAkB,MAAM;AACxF,YAAI,gBAAgB,SAAS,SAAS;AACrC,eAAK,cAAc,WAAW,4BAA4B,cAAc;AACxE,iBAAO,OAAO,IAAI,gBAAgB,MAAM;AAAA,QACzC;AACA,eAAO,EAAE,IAAI,CAAC,aAAa,KAAK,gBAAgB,KAAK;AAAA,MACtD;AAAA,IACD;AAGA,eAAW,MAAM,KAAK,SAAS;AAC9B,aAAO,EAAE,IAAI,CAAC,aAAa,MAAM;AAAA,IAClC;AAEA,WAAO,OAAO,GAAG,MAAM;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,MAAM,cAAc,WAAmB,SAAqC;AAC3E,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,SAAS;AACb,WAAK,KAAK,OAAO,uCAAuC;AACxD;AAAA,IACD;AACA,QAAI;AACH,cAAQ,QAAQ,MAAM;AAAA,QACrB,KAAK,WAAW;AACf,iBAAO,KAAK,qBAAqB,SAAS,OAAO;AAAA,QAClD;AAAA,QACA,KAAK,QAAQ;AACZ,iBAAO,KAAK,kBAAkB,SAAS,OAAO;AAAA,QAC/C;AAAA,QACA,KAAK,QAAQ;AACZ,cAAI,QAAQ,UAAU,iBAAiB,WAAW;AACjD,oBAAQ,sBAAsB,KAAK,IAAI;AAAA,UACxC;AACA,iBAAO,KAAK,oBAAoB,QAAQ,WAAW,EAAE,MAAM,OAAO,CAAC;AAAA,QACpE;AAAA,QACA,SAAS;AACR,gCAAsB,OAAO;AAAA,QAC9B;AAAA,MACD;AAAA,IACD,SAAS,GAAG;AACX,UAAI,aAAa,aAAa;AAC7B,aAAK,cAAc,QAAQ,WAAW,EAAE,MAAM;AAAA,MAC/C,OAAO;AAEN,cAAM;AAAA,MACP;AAAA,IACD;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiBA,cAAc,WAAmB,aAAoD;AACpF,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS;AAC3C,QAAI,CAAC,QAAS;AACd,QAAI,CAAC,aAAa;AACjB,WAAK,cAAc,SAAS;AAC5B;AAAA,IACD;AACA,QAAI,QAAQ,yBAAyB;AACpC,UAAI;AACH,YAAI,QAAQ,OAAO,QAAQ;AAE1B,cAAI;AACJ,kBAAQ,aAAa;AAAA,YACpB,KAAK,4BAA4B;AAEhC,6BAAe,wBAAwB;AACvC;AAAA,YACD,KAAK,4BAA4B;AAEhC,6BAAe,wBAAwB;AACvC;AAAA,YACD,KAAK,4BAA4B;AAEhC,6BAAe,wBAAwB;AACvC;AAAA,YACD;AAEC,6BAAe,wBAAwB;AACvC;AAAA,UACF;AACA,kBAAQ,OAAO,YAAY;AAAA,YAC1B,MAAM;AAAA,YACN,QAAQ;AAAA,UACT,CAAC;AAAA,QACF;AAAA,MACD,QAAQ;AAAA,MAER,UAAE;AACD,aAAK,cAAc,SAAS;AAAA,MAC7B;AAAA,IACD,OAAO;AACN,WAAK,cAAc,WAAW,WAAW;AAAA,IAC1C;AAAA,EACD;AAAA,EAEQ,oBAAoB;AAC3B,eAAW,WAAW,KAAK,SAAS,OAAO,GAAG;AAC7C,WAAK,cAAc,QAAQ,SAAS;AAAA,IACrC;AAAA,EACD;AAAA,EAEQ,iBAAiB,KAAkC;AAC1D,UAAM,UAAU,IAAI,gBAAgB,KAAK,iBAAiB;AAC1D,QAAI,CAAC,QAAS;AACd,UAAM,EAAE,SAAS,KAAK,IAAI;AAC1B,SAAK,oBAAoB,IAAI,SAAS;AACtC,QAAI,SAAS;AAGZ,WAAK,kBAAkB;AACvB;AAAA,IACD;AACA,SAAK,eAAe,IAAI;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,yBAAyB,aAA+B;AAC/D,UAAM,YAAY,KAAK;AAEvB,QAAI,YAAY,gBAAgB,UAAU,eAAe;AACxD,aAAO,4BAA4B;AAAA,IACpC;AAEA,QAAI,YAAY,kBAAkB,KAAK,UAAU,kBAAkB,GAAG;AACrE,iBAAW,CAAC,YAAY,YAAY,KAAK,OAAO,QAAQ,YAAY,SAAS,GAAG;AAC/E,cAAM,aAAa,UAAU,UAAU,UAAU;AACjD,YAAI,eAAe,UAAa,eAAe,YAAY;AAC1D,iBAAO,4BAA4B;AAAA,QACpC;AAAA,MACD;AAAA,IACD;AACA,WAAO,4BAA4B;AAAA,EACpC;AAAA,EAEQ,qBACP,SACA,SACC;AAID,QAAI,uBAAuB,QAAQ;AAEnC,QAAI,yBAAyB,GAAG;AAC/B,6BAAuB;AAAA,IACxB;AAEA,YAAQ,0BAA0B,yBAAyB;AAC3D,QAAI,yBAAyB,GAAG;AAC/B;AAAA,IACD;AACA,QAAI,yBAAyB,GAAG;AAC/B;AACA,cAAQ,uBAAuB;AAAA,IAChC;AAEA,QAAI,wBAAwB,QAAQ,uBAAuB,yBAAyB,GAAG;AACtF,WAAK,cAAc,QAAQ,WAAW,4BAA4B,cAAc;AAChF;AAAA,IACD,WAAW,uBAAuB,yBAAyB,GAAG;AAC7D,WAAK,cAAc,QAAQ,WAAW,4BAA4B,cAAc;AAChF;AAAA,IACD;AAGA,QAAI,QAAQ,UAAU,MAAM;AAC3B,WAAK,cAAc,QAAQ,WAAW,4BAA4B,cAAc;AAChF;AAAA,IACD;AACA,UAAM,aAAa,KAAK,OAAO,mBAAmB,QAAQ,MAAM;AAChE,QAAI,CAAC,WAAW,IAAI;AACnB,WAAK,cAAc,QAAQ,WAAW,KAAK,yBAAyB,QAAQ,MAAM,CAAC;AACnF;AAAA,IACD;AAGA,QAAI,WAAW,MAAM,KAAK,CAAC,MAAM,EAAE,UAAU,YAAY,CAAC,EAAE,IAAI,GAAG;AAClE,WAAK,cAAc,QAAQ,WAAW,4BAA4B,cAAc;AAChF;AAAA,IACD;AAEA,UAAM,gBAAgB,QAAQ,QAAQ,QAAQ,KAAK,gBAAgB,IAChE,KAAK,mBACL,QAAQ;AAEX,UAAM,yBAAyB,WAAW,MAAM,SAAS;AAEzD,UAAM,UAAU,OAAO,QAAkE;AACxF,WAAK,SAAS,IAAI,QAAQ,WAAW;AAAA,QACpC,OAAO,iBAAiB;AAAA,QACxB,WAAW,QAAQ;AAAA,QACnB,YAAY,QAAQ;AAAA,QACpB,QAAQ,QAAQ;AAAA,QAChB,kBAAkB;AAAA,QAClB;AAAA,QACA,qBAAqB,KAAK,IAAI;AAAA,QAC9B,eAAe;AAAA,QACf,yBAAyB,CAAC;AAAA,QAC1B,sBAAsB,QAAQ;AAAA,QAC9B,MAAM,QAAQ;AAAA,QACd,YAAY,QAAQ;AAAA,QACpB,cAAc,QAAQ;AAAA,QACtB,yBAAyB,QAAQ;AAAA,MAClC,CAAC;AACD,WAAK,oBAAoB,QAAQ,WAAW,GAAG;AAAA,IAChD;AAEA,UAAM,EAAE,eAAe,OAAO,IAAI,KAAK,QAAQ,YAAY,CAAC,QAAQ;AACnE,WAAK,iBAAiB,GAAG;AACzB,YAAM,aAAa,IAAI,gBAAgB,QAAQ,eAAe;AAC9D,YAAM,eAAe,KAAK;AAAA,QACzB,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA;AAAA;AAAA;AAAA;AAAA,UAKC,MAAM,OAAO;AAAA,YACZ,CAAC,GAAG,KAAK,cAAc,OAAO,CAAC,EAC7B,OAAO,CAAC,MAAM,EAAE,OAAO,QAAQ,UAAU,EACzC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AAAA,UACvB;AAAA,UACA,SAAS,CAAC;AAAA,QACX;AAAA,MACD;AACA,UAAI,CAAC,aAAa,GAAI,QAAO;AAG7B,UAAI,UAAiC;AACrC,UAAI,cAAc,kBAAkB,KAAK,kBAAkB;AAC1D,cAAM,WAAW,KAAK;AAAA,UACrB,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,UACA,WAAW;AAAA,QACZ;AACA,YAAI,CAAC,SAAS,GAAI,QAAO;AACzB,kBAAU,SAAS;AAAA,MACpB,WAAW,YAAY;AACtB,kBAAU,cAAc,WAAW,IAAI;AAAA,MACxC;AACA,aAAO;AAAA,QACN,MAAM;AAAA,QACN,kBAAkB,QAAQ;AAAA,QAC1B,eAAe,YAAY,UAAU,aAAa;AAAA,QAClD,iBAAiB,yBAAyB;AAAA,QAC1C,QAAQ,KAAK,OAAO,UAAU;AAAA,QAC9B,aAAa,IAAI,SAAS;AAAA,QAC1B,MAAM,EAAE,GAAG,aAAa,OAAO,GAAG,QAAQ;AAAA,QAC1C,YAAY,QAAQ;AAAA,QACpB,cAAc,QAAQ;AAAA,MACvB;AAAA,IACD,CAAC;AAED,SAAK,oBAAoB;AAEzB,QAAI,QAAQ;AACX,cAAQ,MAAM;AAAA,IACf;AAAA,EACD;AAAA,EAEQ,kBACP,SACA,SACC;AAED,QAAI,WAAW,QAAQ,UAAU,iBAAiB,WAAW;AAC5D;AAAA,IACD;AAEA,QAAI,SAAS;AACZ,cAAQ,sBAAsB,KAAK,IAAI;AAAA,IACxC;AAEA,UAAM,mBAAmB,CAAC,KAAK,uBAAuB;AAStD,UAAM,cAAc,CACnBA,UACA,IACA,IACA,QACA,UACI;AACJ,UAAI,CAACA,SAAQ,MAAO,CAAAA,SAAQ,QAAQ,EAAE,aAAa,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,EAAE,EAAE;AACvF,MAAAA,SAAQ,MAAM,YAAY,EAAE,IAAI;AAChC,cAAQ,GAAG,CAAC,GAAG;AAAA,QACd,KAAK,aAAa;AACjB,UAAAA,SAAQ,MAAM,KAAK,KAAK,EAAE,IAAI,GAAG,CAAC;AAClC;AAAA,QACD,KAAK,aAAa;AACjB,iBAAO,UAAU,OAAO,2CAA2C;AACnE,UAAAA,SAAQ,MAAM,KAAK,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK;AAC5C;AAAA,QACD,KAAK,aAAa;AACjB,UAAAA,SAAQ,MAAM,KAAK,QAAQ,KAAK,EAAE;AAClC;AAAA,QACD;AACC,gCAAsB,GAAG,CAAC,CAAC;AAAA,MAC7B;AAAA,IACD;AAEA,UAAM,cAAc,CACnB,SACAA,UACA,IACA,QACA,cACwB;AACxB,YAAM,MAAM,UACT,KAAK,OAAO,uBAAuB,QAAQ,QAAQ,kBAAkB,IAAI,IACzE,EAAE,MAAM,WAAoB,OAAO,OAAO;AAC7C,UAAI,IAAI,SAAS,SAAS;AACzB,cAAM,IAAI,YAAY,IAAI,QAAQ,4BAA4B,cAAc;AAAA,MAC7E;AACA,UAAI,EAAE,OAAO,MAAM,IAAI;AAGvB,YAAM,MAAM,QAAQ,IAAI,EAAE;AAI1B,UAAI,WAAW;AACd,cAAMC,UAAS,UAAU,OAAO,MAAM,KAAK;AAC3C,YAAI,CAACA,QAAQ,QAAO,OAAO,GAAG,MAAS;AACvC,YAAI,CAAC,IAAK,SAAQA;AAAA,MACnB;AAEA,UAAI,KAAK;AAGR,cAAM,aAAa,aAAa,eAAe,KAAK,OAAO,OAAO,IAAI,QAAQ,CAAC;AAC/E,cAAM,OAAO,sBAAsB,KAAK,OAAO,UAAU;AACzD,YAAI,MAAM;AACT,kBAAQ,IAAI,IAAI,KAAK;AACrB,sBAAYD,UAAS,IAAI,CAAC,aAAa,OAAO,IAAI,GAAG,KAAK,KAAK;AAAA,QAChE;AAAA,MACD,OAAO;AAIN,cAAM,aAAa,aAAa,eAAe,KAAK,OAAO,OAAO,MAAM,QAAQ,CAAC;AACjF,uBAAe,OAAO,UAAU;AAChC,gBAAQ,IAAI,IAAI,KAAK;AACrB,oBAAYA,UAAS,IAAI,CAAC,aAAa,KAAK,KAAK,GAAG,QAAW,MAAS;AAAA,MACzE;AAEA,aAAO,OAAO,GAAG,MAAS;AAAA,IAC3B;AAEA,UAAM,gBAAgB,CACrB,SACAA,UACA,IACA,OACA,cACI;AAEJ,YAAM,MAAM,QAAQ,IAAI,EAAE;AAC1B,UAAI,CAAC,IAAK;AAEV,YAAM,aAAa,aAAa,eAAe,KAAK,OAAO,OAAO,IAAI,QAAQ,CAAC;AAG/E,YAAM,aAAa,UAChB,KAAK,OAAO,uBAAuB,KAAK,QAAQ,kBAAkB,MAAM,IACxE,EAAE,MAAM,WAAoB,OAAO,IAAI;AAC1C,UAAI,WAAW,SAAS,SAAS;AAChC,cAAM,IAAI,YAAY,WAAW,QAAQ,4BAA4B,cAAc;AAAA,MACpF;AAEA,UAAI,WAAW,UAAU,KAAK;AAE7B,cAAM,OAAO,mBAAmB,KAAK,OAAO,YAAY,gBAAgB;AACxE,YAAI,MAAM;AAET,cAAI,aAAa,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,EAAG;AAC3C,kBAAQ,IAAI,IAAI,KAAK,CAAC,CAAC;AACvB,sBAAYA,UAAS,IAAI,CAAC,aAAa,OAAO,KAAK,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;AAAA,QACrE;AAAA,MACD,OAAO;AAIN,cAAM,UAAU,gBAAgB,WAAW,OAAO,KAAK;AAEvD,cAAM,WAAW,UACd,KAAK,OAAO,uBAAuB,SAAS,QAAQ,kBAAkB,IAAI,IAC1E,EAAE,MAAM,WAAoB,OAAO,QAAQ;AAE9C,YAAI,SAAS,SAAS,SAAS;AAC9B,gBAAM,IAAI,YAAY,SAAS,QAAQ,4BAA4B,cAAc;AAAA,QAClF;AAEA,cAAM,OAAO,sBAAsB,KAAK,SAAS,OAAO,YAAY,gBAAgB;AACpF,YAAI,MAAM;AAET,cAAI,aAAa,CAAC,UAAU,KAAK,SAAS,KAAK,EAAG;AAClD,kBAAQ,IAAI,IAAI,SAAS,KAAK;AAC9B,sBAAYA,UAAS,IAAI,CAAC,aAAa,OAAO,IAAI,GAAG,KAAK,SAAS,KAAK;AAAA,QACzE;AAAA,MACD;AAAA,IACD;AAEA,UAAM,EAAE,QAAQ,eAAe,QAAQ,IAAI,KAAK,QAAQ;AAAA,MACvD,CAAC,QAAQ;AACR,aAAK,iBAAiB,GAAG;AAIzB,cAAM,aAA4B,EAAE,OAAO,KAAK;AAChD,cAAM,kBAAiC,EAAE,OAAO,KAAK;AAErD,YAAI,KAAK,gBAAgB,SAAS,cAAc,cAAc,WAAW,QAAQ,UAAU;AAC1F,cAAI,CAAC,QAAS,OAAM,IAAI,MAAM,yCAAyC;AAEvE,gBAAM,KAAK,QAAQ;AACnB,gBAAM,CAAC,MAAM,GAAG,IAAI,QAAQ;AAC5B,gBAAM,EAAE,SAAS,IAAI,KAAK;AAC1B,kBAAQ,MAAM;AAAA,YACb,KAAK,aAAa,KAAK;AAEtB,0BAAY,KAAK,eAAe,iBAAiB,IAAI;AAAA,gBACpD,GAAG;AAAA,gBACH;AAAA,gBACA;AAAA,cACD,CAAC;AACD;AAAA,YACD;AAAA,YACA,KAAK,aAAa,OAAO;AAExB,4BAAc,KAAK,eAAe,iBAAiB,IAAI;AAAA,gBACtD,GAAG;AAAA,gBACH,IAAI,CAAC,YAAY,KAAK,EAAE;AAAA,gBACxB,UAAU,CAAC,YAAY,KAAK,QAAQ;AAAA,cACrC,CAAC;AACD;AAAA,YACD;AAAA,UACD;AAAA,QACD;AAKA,cAAM,WAAW,CAAC,aACjB,CAAC,YACA,KAAK,YAAY,IAAI,QAAQ,IAAI,QAAQ,iBAAiB,SAAS,CAAC,QAAQ;AAE9E,YAAI,QAAQ,MAAM;AAEjB,qBAAW,CAAC,IAAI,EAAE,KAAK,yBAAyB,QAAQ,IAAK,GAAG;AAC/D,oBAAQ,GAAG,CAAC,GAAG;AAAA,cACd,KAAK,aAAa,KAAK;AAItB,oBAAI,CAAC,SAAS,GAAG,CAAC,EAAE,QAAQ,EAAG;AAG/B,oBACC,CAAC,KAAK,cAAc,IAAI,GAAG,CAAC,EAAE,QAAQ,KACtC,CAAC,KAAK,YAAY,IAAI,GAAG,CAAC,EAAE,QAAQ,GACnC;AACD,wBAAM,IAAI;AAAA,oBACT;AAAA,oBACA,4BAA4B;AAAA,kBAC7B;AAAA,gBACD;AACA,sBAAM,SAAS,GAAG,CAAC;AASnB,sBAAM,aAAa,UAAY,IAAI,IAAI,EAAE,KAAuB,OAAQ;AACxE,oBAAI,WAAW,cAAc,WAAW,aAAa,OAAO,UAAU;AACrE,uBAAK,KAAK;AAAA,oBACT;AAAA,oBACA,GAAG,WAAW,QAAQ,OAAO,OAAO,QAAQ;AAAA,oBAC5C;AAAA,oBACA;AAAA,oBACA,QAAQ;AAAA,kBACT;AACA;AAAA,gBACD;AAGA,oBAAI;AACJ,oBAAI,WAAW,KAAK,iBAAiB;AACpC,wBAAM,eAAe,KAAK,cAAc,OAAO,QAAQ;AACvD,sBAAI,cAAc;AACjB,gCAAY,CAAC,SAAS,SAAS;AAC9B,4BAAMC,UAAS;AAAA,wBACd,UACG;AAAA,0BACA,SAAS;AAAA,4BACR,WAAW,QAAQ;AAAA,4BACnB,YAAY,QAAQ;AAAA,4BACpB,MAAM,QAAQ;AAAA,0BACf;AAAA,0BACA,MAAM;AAAA,0BACN,MAAM;AAAA,0BACN;AAAA,wBACD,IACC;AAAA,0BACA,SAAS;AAAA,4BACR,WAAW,QAAQ;AAAA,4BACnB,YAAY,QAAQ;AAAA,4BACpB,MAAM,QAAQ;AAAA,0BACf;AAAA,0BACA,MAAM;AAAA,0BACN,MAAM;AAAA,0BACN;AAAA,wBACD;AAAA,sBACH;AACA,0BAAI,CAACA,SAAQ;AACZ,6BAAK,KAAK;AAAA,0BACT;AAAA,0BACA,OAAO;AAAA,0BACP;AAAA,0BACA;AAAA,0BACA,QAAQ;AAAA,wBACT;AACA,+BAAO;AAAA,sBACR;AAEA,6BAAO,UAAU,OAAOA;AAAA,oBACzB;AAAA,kBACD;AAAA,gBACD;AACA,4BAAY,KAAK,YAAY,IAAI,QAAQ,SAAS;AAClD;AAAA,cACD;AAAA,cACA,KAAK,aAAa,OAAO;AACxB,sBAAM,MAAM,IAAI,IAAI,EAAE;AAEtB,oBAAI,CAAC,IAAK;AACV,oBAAI,CAAC,SAAS,IAAI,QAAQ,EAAG;AAG7B,sBAAM,iBAAiB,WAAW,KAAK,cAAc,IAAI,QAAQ;AACjE,sBAAM,YAAY,iBACf,CAAC,MAAS,SAAY;AACtB,wBAAMA,UAAS,eAAe;AAAA,oBAC7B,SAAS;AAAA,sBACR,WAAW,QAAQ;AAAA,sBACnB,YAAY,QAAQ;AAAA,sBACpB,MAAM,QAAQ;AAAA,oBACf;AAAA,oBACA,MAAM;AAAA,oBACN;AAAA,oBACA;AAAA,kBACD,CAAC;AACD,sBAAI,CAACA,SAAQ;AACZ,yBAAK,KAAK;AAAA,sBACT;AAAA,sBACA,IAAI;AAAA,sBACJ;AAAA,sBACA;AAAA,sBACA,QAAQ;AAAA,oBACT;AAAA,kBACD;AACA,yBAAOA;AAAA,gBACR,IACC;AAEH,8BAAc,KAAK,YAAY,IAAI,GAAG,CAAC,GAAG,SAAS;AACnD;AAAA,cACD;AAAA,cACA,KAAK,aAAa,QAAQ;AACzB,sBAAM,MAAM,IAAI,IAAI,EAAE;AACtB,oBAAI,CAAC,KAAK;AAET;AAAA,gBACD;AACA,oBAAI,CAAC,SAAS,IAAI,QAAQ,EAAG;AAG7B,sBAAM,kBAAkB,WAAW,KAAK,cAAc,IAAI,QAAQ;AAClE,oBACC,mBACA,CAAC,gBAAgB;AAAA,kBAChB,SAAS;AAAA,oBACR,WAAW,QAAQ;AAAA,oBACnB,YAAY,QAAQ;AAAA,oBACpB,MAAM,QAAQ;AAAA,kBACf;AAAA,kBACA,MAAM;AAAA,kBACN,MAAM;AAAA,kBACN,MAAM;AAAA,gBACP,CAAC,GACA;AACD,uBAAK,KAAK;AAAA,oBACT;AAAA,oBACA,IAAI;AAAA,oBACJ;AAAA,oBACA;AAAA,oBACA,QAAQ;AAAA,kBACT;AACA;AAAA,gBACD;AAIA,oBAAI,OAAO,EAAE;AACb,4BAAY,YAAY,IAAI,IAAI,KAAK,MAAS;AAC9C;AAAA,cACD;AAAA,YACD;AAAA,UACD;AAAA,QACD;AAEA,eAAO,EAAE,YAAY,gBAAgB;AAAA,MACtC;AAAA,MACA,EAAE,IAAI,KAAK,eAAe,aAAa,iBAAiB;AAAA,IACzD;AAEA,SAAK,oBAAoB;AAEzB,QAAI;AACJ,QAAI,WAAW,SAAS;AAEvB,aAAO,WAAW,QAAQ,EAAE,aAAa,cAAc,OAAO,KAAK,CAAC,GAAG,MAAM,QAAQ;AAAA,IACtF;AAEA,QAAI,QAAQ,OAAO,WAAW,OAAO,aAAa,QAAQ,IAAI,GAAG;AAChE,mBAAa;AAAA,QACZ,MAAM;AAAA,QACN,aAAa,QAAQ;AAAA,QACrB,aAAa;AAAA,QACb,QAAQ;AAAA,MACT;AAAA,IACD,WAAW,CAAC,OAAO,WAAW,OAAO,aAAa;AACjD,mBAAa;AAAA,QACZ,MAAM;AAAA,QACN,aAAa,QAAQ;AAAA,QACrB,aAAa;AAAA,QACb,QAAQ;AAAA,MACT;AAAA,IACD,WAAW,SAAS;AAGnB,YAAM,OAAO,KAAK;AAAA,QACjB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,OAAO,WAAW,MAAM;AAAA,QACxB,OAAO,WAAW,MAAM;AAAA,MACzB;AACA,UAAI,KAAK,IAAI;AACZ,qBAAa;AAAA,UACZ,MAAM;AAAA,UACN,aAAa,QAAQ;AAAA,UACrB,aAAa;AAAA,UACb,QAAQ,EAAE,gBAAgB,KAAK,MAAM;AAAA,QACtC;AAAA,MACD;AAAA,IAED;AAEA,QAAI,WAAW,YAAY;AAC1B,WAAK,oBAAoB,QAAQ,WAAW,UAAU;AAAA,IACvD;AACA,QAAI,OAAO,WAAW,SAAS,OAAO,gBAAgB,OAAO;AAC5D,WAAK;AAAA,QACJ;AAAA,UACC,MAAM;AAAA,YACL,GAAG,OAAO,WAAW,OAAO,KAAK;AAAA,YACjC,GAAG,OAAO,gBAAgB,OAAO,KAAK;AAAA,UACvC;AAAA,UACA,SAAS;AAAA,YACR,GAAI,OAAO,WAAW,OAAO,KAAK,WAAW,CAAC;AAAA,YAC9C,GAAI,OAAO,gBAAgB,OAAO,KAAK,WAAW,CAAC;AAAA,UACpD;AAAA,QACD;AAAA,QACA;AAAA,UACC,GAAG,OAAO,WAAW,OAAO;AAAA,UAC5B,GAAG,OAAO,gBAAgB,OAAO;AAAA,QAClC;AAAA,QACA,SAAS;AAAA,MACV;AAAA,IACD;AAEA,QAAI,OAAO,gBAAgB,OAAO;AACjC,qBAAe,MAAM;AACpB,aAAK,mBAAmB;AAAA,MACzB,CAAC;AAAA,IACF;AAEA,QAAI,OAAO,WAAW,SAAS,KAAK,oBAAoB;AACvD,YAAM,OAAO,OAAO,WAAW,MAAM;AACrC,qBAAe,MAAM;AACpB,YAAI;AACH,eAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAAA,QAClD,SAAS,GAAG;AACX,eAAK,KAAK,QAAQ,4BAA4B,CAAC;AAAA,QAChD;AAAA,MACD,CAAC;AAAA,IACF;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,YAAY,WAAmB;AAC9B,SAAK,cAAc,SAAS;AAAA,EAC7B;AACD;AAUO,MAAM,cAAqE;AAAA,EAChE,YAAY,IAAI,QAAmB,WAAW;AAAA,EAE/D,IAAI,IAAuC;AAC1C,WAAO,KAAK,UAAU,IAAI,EAAE;AAAA,EAC7B;AAAA,EAEA,IAAI,IAAY,OAAgB;AAC/B,SAAK,UAAU,IAAI,IAAI,KAAK;AAAA,EAC7B;AAAA,EAEA,OAAO,IAAkB;AACxB,SAAK,UAAU,OAAO,EAAE;AAAA,EACzB;AAAA,EAEA,SAAS;AACR,WAAO,KAAK,UAAU,OAAO;AAAA,EAC9B;AACD;",
   "names": ["changes", "result"]
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tldraw/sync-core",
   "description": "tldraw infinite canvas SDK (multiplayer sync).",
-  "version": "5.3.0-internal.fba91ed55f6c",
+  "version": "5.3.0-next.2fa9c61a8de6",
   "author": {
     "name": "tldraw GB Ltd.",
     "email": "hello@tldraw.com"
@@ -49,17 +49,17 @@
     "@types/uuid-readable": "^0.0.3",
     "react": "^19.2.1",
     "react-dom": "^19.2.1",
-    "tldraw": "5.3.0-internal.fba91ed55f6c",
+    "tldraw": "5.3.0-next.2fa9c61a8de6",
     "typescript": "^5.8.3",
     "uuid-by-string": "^4.0.0",
     "uuid-readable": "^0.0.2",
     "vitest": "^4.1.7"
   },
   "dependencies": {
-    "@tldraw/state": "5.3.0-internal.fba91ed55f6c",
-    "@tldraw/store": "5.3.0-internal.fba91ed55f6c",
-    "@tldraw/tlschema": "5.3.0-internal.fba91ed55f6c",
-    "@tldraw/utils": "5.3.0-internal.fba91ed55f6c",
+    "@tldraw/state": "5.3.0-next.2fa9c61a8de6",
+    "@tldraw/store": "5.3.0-next.2fa9c61a8de6",
+    "@tldraw/tlschema": "5.3.0-next.2fa9c61a8de6",
+    "@tldraw/utils": "5.3.0-next.2fa9c61a8de6",
     "nanoevents": "^7.0.1",
     "ws": "^8.18.0"
   },

package/src/lib/TLSyncRoom.ts

@@ -155,8 +155,10 @@ export interface RoomSnapshot {
  */
 export type TLRecordAuthorizer<Rec extends UnknownRecord, SessionMeta> = (
 	args: {
-		/** The session performing the write, including its host-provided `meta` (e.g. the authenticated user id). */
-		session: { sessionId: string; meta: SessionMeta }
+		/** The session performing the write: its host-provided `meta` (e.g. the authenticated user
+		 *  id) and the canvas-lane `isReadonly` state, for hosts whose object-lane policy follows
+		 *  canvas access. */
+		session: { sessionId: string; isReadonly: boolean; meta: SessionMeta }
 	} & (
 		| { type: 'create'; prev: null; next: Rec }
 		| { type: 'update'; prev: Rec; next: Rec }
@@ -1343,38 +1345,50 @@ export class TLSyncRoom<R extends UnknownRecord, SessionMeta> {
 									)
 								}
 								const record = op[1]
+								// A put must not change the record's typeName. Two reasons, and the first
+								// applies whether or not authorizers are configured: the write gate above
+								// keyed off the *incoming* typeName, so a swap between lanes (document <->
+								// object) would let a session denied on one lane write through the other by
+								// relabeling an existing record. The second is that the authorizer lookup
+								// also keys off the incoming typeName while the replace path validates
+								// against the stored one, so a swap would consult the wrong authorizer (or
+								// none). Skip it like a veto; the client self-corrects.
+								const prevRecord = session ? ((txn.get(id) as R | undefined) ?? null) : null
+								if (session && prevRecord && prevRecord.typeName !== record.typeName) {
+									this.log?.warn?.(
+										'skipping put that changes typeName',
+										`${prevRecord.typeName} -> ${record.typeName}`,
+										id,
+										'session:',
+										session.sessionId
+									)
+									continue
+								}
 								// Per-type authorizer: stamp/veto the write from the session's identity.
 								// Client pushes only; runs inside `addDocument`, on the up-migrated record.
 								let authorize: ((prev: R | null, next: R) => R | null) | undefined
 								if (session && this.authorizeRecord) {
-									const prev = (txn.get(id) as R | undefined) ?? null
-									// A put must not change the record's typeName: the authorizer lookup keys
-									// off the incoming typeName while the replace path validates against the
-									// stored one, so a swap would consult the wrong authorizer (or none).
-									// Skip it like a veto; the client self-corrects.
-									if (prev && prev.typeName !== record.typeName) {
-										this.log?.warn?.(
-											'skipping put that changes typeName',
-											`${prev.typeName} -> ${record.typeName}`,
-											id,
-											'session:',
-											session.sessionId
-										)
-										continue
-									}
 									const authorizePut = this.authorizerFor(record.typeName)
 									if (authorizePut) {
 										authorize = (prevRec, next) => {
 											const result = authorizePut(
 												prevRec
 													? {
-															session: { sessionId: session.sessionId, meta: session.meta },
+															session: {
+																sessionId: session.sessionId,
+																isReadonly: session.isReadonly,
+																meta: session.meta,
+															},
 															type: 'update',
 															prev: prevRec,
 															next,
 														}
 													: {
-															session: { sessionId: session.sessionId, meta: session.meta },
+															session: {
+																sessionId: session.sessionId,
+																isReadonly: session.isReadonly,
+																meta: session.meta,
+															},
 															type: 'create',
 															prev: null,
 															next,
@@ -1409,7 +1423,11 @@ export class TLSyncRoom<R extends UnknownRecord, SessionMeta> {
 								const authorize = authorizePatch
 									? (prev: R, next: R) => {
 											const result = authorizePatch({
-												session: { sessionId: session.sessionId, meta: session.meta },
+												session: {
+													sessionId: session.sessionId,
+													isReadonly: session.isReadonly,
+													meta: session.meta,
+												},
 												type: 'update',
 												prev,
 												next,
@@ -1443,7 +1461,11 @@ export class TLSyncRoom<R extends UnknownRecord, SessionMeta> {
 								if (
 									authorizeRemove &&
 									!authorizeRemove({
-										session: { sessionId: session.sessionId, meta: session.meta },
+										session: {
+											sessionId: session.sessionId,
+											isReadonly: session.isReadonly,
+											meta: session.meta,
+										},
 										type: 'delete',
 										prev: doc,
 										next: null,

package/src/test/objectStore.test.ts

@@ -85,7 +85,7 @@ function makeRoom(
 		onCommittedChanges?(args: { diff: any; documentClock: number }): void
 		authorizeRecord?: {
 			[typeName: string]: (args: {
-				session: { sessionId: string; meta: any }
+				session: { sessionId: string; isReadonly: boolean; meta: any }
 				type: 'create' | 'update' | 'delete'
 				prev: any
 				next: any
@@ -436,6 +436,26 @@ describe('object store lane', () => {
 		const storedNote = (storage: InMemorySyncStorage<R>, id: string) =>
 			storage.getObjectsSnapshot().find((d) => d.state.id === id)?.state as any
 
+		it('exposes the session isReadonly flag to the authorizer', () => {
+			const authorize = vi.fn(({ next }: any) => next)
+			const { room } = withNote(authorize)
+			// a canvas-readonly session can still write the object lane (objectAccess defaults to
+			// 'write'), which is exactly why authorizers need to see isReadonly independently
+			connectSession(room, 'reader', { isReadonly: true, meta: { userId: 'u' } })
+
+			const note = Note.create({ text: 'x' })
+			push(room, 'reader', { [note.id]: [RecordOpType.Put, note] })
+
+			expect(authorize.mock.calls[0][0].session.isReadonly).toBe(true)
+
+			authorize.mockClear()
+			connectSession(room, 'writer', { isReadonly: false, meta: { userId: 'u' } })
+			const note2 = Note.create({ text: 'y' })
+			push(room, 'writer', { [note2.id]: [RecordOpType.Put, note2] })
+
+			expect(authorize.mock.calls[0][0].session.isReadonly).toBe(false)
+		})
+
 		it('stamps a created record from the session, overriding the client value', () => {
 			const { room, storage } = withNote(authorizeNote)
 			const socket = connectSession(room, 'alice', { meta: { userId: 'user-alice' } })
@@ -561,6 +581,35 @@ describe('object store lane', () => {
 			expect(storedNote(storage, note.id)?.typeName).toBe('note')
 		})
 
+		// The typeName guard must not depend on authorizers being configured: the write gate keys
+		// off the *incoming* typeName, so relabeling an existing object-lane record as a document
+		// type would otherwise let an objectAccess:'read' session write through the document lane.
+		it('vetoes a typeName swap even with no authorizeRecord configured', () => {
+			const note = Note.create({ text: 'by:user-alice' })
+			const { room, storage } = makeRoom({
+				objectTypes: ['note'],
+				snapshot: {
+					documents: [{ state: note, lastChangedClock: 0 }],
+					clock: 0,
+					documentClock: 0,
+					schema: schema.serialize(),
+				},
+			})
+			// denied on the object lane, but allowed on the document lane
+			const socket = connectSession(room, 'mallory', {
+				objectAccess: 'read',
+				meta: { userId: 'user-mallory' },
+			})
+
+			push(room, 'mallory', {
+				[note.id]: [RecordOpType.Put, { id: note.id, typeName: 'doc', title: 'swapped' } as any],
+			})
+
+			expect(lastPushResult(socket)).toMatchObject({ action: 'discard' })
+			expect(storedNote(storage, note.id)?.typeName).toBe('note')
+			expect(storedNote(storage, note.id)?.text).toBe('by:user-alice')
+		})
+
 		it('vetoes a put over an existing record that changes an immutable field', () => {
 			const { room, storage, note } = seededWithNote(authorizeNote)
 			const socket = connectSession(room, 'mallory', { meta: { userId: 'user-mallory' } })