@voltro/plugin-rooms 0.0.0-stage → 0.87.0

package/dist/apiRegistryBinding.js

@@ -0,0 +1,399 @@
+import { ProtocolError as e } from "./errors.js";
+import { simulationOwnData as t } from "./simulationAuthoring.js";
+import { RoomStateCodec as n } from "./stateCodec.js";
+import { captureGeometryPrivacyTarget as ee } from "./geometryPersistenceData.js";
+import { bindWorldTransitionCommandHandlers as r } from "./worldCommands.js";
+import { ROOMS_TABLE as i } from "./identities.js";
+import { captureRoomSnapshotBlobs as a } from "./snapshotBlobIndex.js";
+import { assertRoomSeatSecrets as o, resolveRoomSeatTokenStrategies as s } from "./seats.js";
+import { RoomCatalog as c } from "./catalog.js";
+import { captureRoomsGeometryBinding as te } from "./geometryApiBinding.js";
+import { captureAdmittedRoomPoolTopology as l, captureRoomPoolCatalog as u } from "./roomPoolTopology.js";
+import { roomModerationService as ne } from "./moderation.js";
+import { RoomsApiBindFailure as d } from "./apiBinding.js";
+import { captureRoomLockstepRecoveryOptions as f } from "./lockstepRecoveryTruth.js";
+import { dataStoreRoomDirectory as p } from "./directory.js";
+import { dataStoreRoomApiReservations as re } from "./apiReservations.js";
+import { dataStoreRoomAccessSweep as ie } from "./roomAccessSweep.js";
+import { makeRoomControlCarrier as m } from "./controlCarrier.js";
+import { openRegistryRoomAppCommandServer as ae, openRegistryRoomControlClient as oe } from "./controlRegistry.js";
+import { directoryRoomControlTargetResolver as se } from "./controlTarget.js";
+import { dataStoreRoomRecovery as ce } from "./recovery.js";
+import { dataStoreRoomReaper as le } from "./reaper.js";
+import { DEFAULT_WORLD_COMMAND_NAMES as h, buildDefaultApiWorldState as ue } from "./worldDefaultBinding.js";
+import { and as de, eq as fe, gt as pe } from "@voltro/database";
+import { Effect as g } from "effect";
+import { createHash as me } from "node:crypto";
+import { ConnectionRegistry as he } from "@voltro/kv/connection";
+import { HotStore as ge, layerRoutedHotRedis as _e } from "@voltro/kv/hot";
+//#region src/apiRegistryBinding.ts
+function _(t) {
+	throw new e({ detail: t });
+}
+var v = (e, t) => Number.isSafeInteger(e) && e > 0 && e <= t ? e : _("Invalid registry Rooms API budget"), y = (y) => {
+	if (!y || typeof y != "object" || Array.isArray(y) || y.catalog !== void 0 && (typeof y.catalog.get != "function" || typeof y.catalog.inventory != "function") || y.membership !== void 0 && typeof y.membership.list != "function" || typeof y.epochNow != "function" || typeof y.observerNow != "function" || y.runEffect !== void 0 && typeof y.runEffect != "function" || typeof y.bindPrivacy != "function" || typeof y.region != "string" || !y.region.trim() || y.region.length > 191) return _("Registry Rooms API requires admitted catalog, membership, region, runtime and privacy binding");
+	if (o(y.seatSecrets), o(y.projectControlSecrets), y.bindWorldState !== void 0 && typeof y.bindWorldState != "function") return _("World state resource binding must be a function");
+	let ve = y.bindWorldState, b = Object.getOwnPropertyDescriptor(y, "bindGeometry");
+	if (b && (!b.enumerable || !("value" in b)) || !b && "bindGeometry" in y) return _("Geometry resource binder requires own data");
+	let x = b?.value;
+	if (b && typeof x != "function") return _("Geometry resource binder must be a function");
+	let S = y.commands;
+	if (y.admission !== void 0 && typeof y.admission != "function") return _("Room reservation admission must be a function");
+	let C = y.admission;
+	if (y.seatAttributes !== void 0 && typeof y.seatAttributes != "function") return _("Room seat attributes must be resolved by a function");
+	let ye = y.seatAttributes;
+	if (S !== void 0 && (typeof S != "object" || !S.run || !S.publish)) return _("Room app commands need run and publish bindings");
+	let w = y.world ?? {}, T = w.authority ?? "host", E = Object.getOwnPropertyDescriptor(w, "groups"), D;
+	if (E && (!E.enumerable || !("value" in E))) return _("Default World groups require own configuration");
+	if (E?.value !== void 0) {
+		if (!E.enumerable || !("value" in E) || !E.value || Object.getPrototypeOf(E.value) !== Object.prototype || Reflect.ownKeys(E.value).length !== 1) return _("Default World groups require an own Party capability");
+		let e = Object.getOwnPropertyDescriptor(E.value, "parties"), t = e && "value" in e && e.value ? Object.getOwnPropertyDescriptor(e.value, "read") : void 0;
+		if (!e?.enumerable || !("value" in e) || !t || !("value" in t) || typeof t.value != "function" || ve !== void 0) return _("Default World groups require the actual Party reader and default World state binding");
+		if (D = Object.freeze({ read: t.value.bind(e.value) }), Object.values(h).some((e) => S && (e in S.run || e in S.publish))) return _("Default World command names conflict with explicit Room app commands");
+	} else if (!E && "groups" in w) return _("Default World groups require own configuration");
+	if (!["host", "api"].includes(T) || w.leaseConnection !== void 0 && !/^redis:[A-Za-z][A-Za-z0-9_-]*$/.test(w.leaseConnection)) return _("Invalid default World binding options");
+	let be = v(w.seatTtlMs ?? 3e4, 2 ** 53 - 1), O = y.region, k = y.controlConnection, A = structuredClone(y.projectControlSecrets), j = structuredClone(y.seatSecrets), xe = y.runEffect, Se = y.bindPrivacy, M = y.epochNow, Ce = y.observerNow, we = y.catalog === void 0 ? void 0 : new c(y.catalog.inventory(), { previousHistory: y.catalog.history }), Te = y.membership, Ee = y.membership?.list.bind(y.membership), N = a(y.snapshotBlobs), De = s(y.strategies?.seatToken), P = y.strategies?.selectHost;
+	for (let e of ["pools", "poolSelectHost"]) {
+		let t = Object.getOwnPropertyDescriptor(y, e);
+		if (t && (!t.enumerable || !("value" in t)) || !t && e in y) return _("Registry pool policy requires own data");
+	}
+	let F = y.pools === void 0 ? void 0 : l(y.pools), I = y.poolSelectHost;
+	if (I !== void 0 && typeof I != "function") return _("Pool selection strategy requires its admitted topology");
+	let L = Object.getOwnPropertyDescriptor(y, "lockstepRecovery");
+	if (L && (!L.enumerable || !("value" in L)) || !L && "lockstepRecovery" in y) return _("Registry Lockstep recovery budgets require own data");
+	let Oe = L?.value === void 0 ? {} : t(L.value, [
+		"maxTicks",
+		"maxJournalBytes",
+		"maxPlayers"
+	], []);
+	f({
+		...Oe,
+		descriptor: () => void 0
+	});
+	let ke = v(y.heartbeatEveryMs, Math.floor((2 ** 53 - 1) / 3)), R = v(y.heartbeatTtlMs, 2 ** 53 - 1), Ae = v(y.graceMs, 2 ** 53 - 1), z = v(y.maxCheckpointBytes ?? 1048576, 67108864), je = v(y.maxListedRooms ?? 256, 256), Me = v(y.maxHostAttempts ?? 32, 256), Ne = v(y.maxReaperHosts ?? 32, 256), Pe = v(y.maxRoomsPerHost ?? 32, 4096), Fe = v(y.maxRequestMs ?? 5e3, 6e4);
+	if (R <= ke || P !== void 0 && typeof P != "function") return _("Invalid registry Rooms API policy");
+	let Ie = [A.current, ...A.previous === void 0 ? [] : [A.previous]], B = [j.current, ...j.previous === void 0 ? [] : [j.previous]];
+	return Ie.some((e) => B.some((t) => t.secret === e.secret)) ? _("Room control and seat signing keys must be independent") : typeof k != "string" || !/^(redis|nats):[A-Za-z][A-Za-z0-9_-]*$/.test(k) ? _("Registry Rooms API needs an explicit control connection") : async (a, o) => {
+		if (o.catalog !== void 0 && we !== void 0) return _("Rooms API requires one catalog source: app discovery or explicit binding");
+		let s = o.catalog ?? we;
+		if (!s) return _("Rooms API requires the actual app-discovered or explicitly admitted catalog");
+		let l = new c(s.inventory(), { previousHistory: s.history }), v = l.get.bind(l), y = (e) => new n(v(e).state), b = new Map(l.inventory().flatMap((e) => e.descriptor.mode === "lockstep" ? [[e.descriptor.name, e.descriptor]] : [])), E = f({
+			...Oe,
+			descriptor: (e) => b.get(e)
+		}), L = b.size ? E : void 0;
+		if (o.pools !== void 0 && F !== void 0 && o.pools !== F) return _("Room pools must have one app-owned declaration");
+		let Ie = o.pools ?? F, B = Ie === void 0 ? void 0 : u(Ie, l.inventory().map((e) => e.descriptor.name));
+		if (I !== void 0 && B === void 0) return _("Pool selection strategy requires its admitted topology");
+		let V = o.host, H = V?.connectionRegistry;
+		if (o.worldClientControls && o.worldState !== "transitions") return _("World client controls require actual transition state");
+		let Le = o.worlds.some((e) => e.geometry !== void 0);
+		if (Le && !x) return _("Declared World geometry requires its actual resource binding before registry acquisition");
+		let Re = o.worldState !== "none" && !ve;
+		if (!V || !H || o.signal.aborted) return _("Registry Rooms API requires its live app-owned registry");
+		let U = xe ?? V.runEffect;
+		if (typeof U != "function") return _("Rooms API requires the actual app-provided Effect runner");
+		let W = V.membership;
+		if (Te !== void 0 && W?.list !== void 0 && Te !== W) return _("Rooms API requires one membership owner: the installing app or explicit binding");
+		let ze = Ee ?? (typeof W?.list == "function" ? W.list.bind(W) : void 0);
+		if (!ze) return _("Rooms API requires the actual app-owned or explicitly admitted membership snapshot");
+		let G = Object.freeze({ list: ze });
+		m({
+			mount: o.pluginName,
+			projectControlSecrets: A,
+			epochNow: M,
+			maxRequestMs: Fe
+		});
+		let K = p(a, {
+			pools: B,
+			poolSelectHost: I,
+			epochNow: M,
+			heartbeatTtlMs: R,
+			maxListedRooms: je
+		}), Be = ce(a, {
+			pools: B,
+			membership: G,
+			observerNow: Ce,
+			epochNow: M,
+			heartbeatEveryMs: ke,
+			hostHeartbeatTtlMs: R,
+			graceMs: Ae,
+			maxCheckpointBytes: z,
+			snapshotCodec: y,
+			...L === void 0 ? {} : { lockstep: L },
+			...N === void 0 ? {} : { snapshotBlobs: N }
+		});
+		if (D && (o.worldState !== "transitions" || !o.worldClientControls || typeof V.runWithAppServices != "function")) return _("Default World groups require transition state, player controls and the app-service runner");
+		let Ve, He = (t, n, ee) => g.suspend(() => {
+			let r = Ve?.run[t];
+			return r ? r(n, ee).pipe(g.mapError(() => new e({ detail: "Default World command remains incomplete" }))) : g.fail(new e({ detail: "Default World commands are not ready" }));
+		}), Ue = D ? r(h, {
+			transition: (e, t) => He(h.transition, e, t),
+			transitionGroup: (e, t) => He(h.transitionGroup, e, t)
+		}) : void 0, q = Ue ? Object.freeze({
+			run: Object.freeze({
+				...S?.run,
+				...Ue.run
+			}),
+			publish: Object.freeze({ ...S?.publish })
+		}) : S, We = q === void 0 ? void 0 : G.list().find((e) => e.self);
+		if (q !== void 0 && !We) return _("Room app commands need this API instance in the app membership");
+		let Ge = q === void 0 ? void 0 : await U(ae(H, {
+			connection: k,
+			mount: o.pluginName,
+			projectControlSecrets: A,
+			epochNow: M,
+			maxRequestMs: Fe,
+			instance: {
+				instanceId: We.instanceId,
+				startedAt: We.startedAt
+			},
+			bindings: q
+		})), J;
+		try {
+			J = await U(oe(H, {
+				connection: k,
+				mount: o.pluginName,
+				projectControlSecrets: A,
+				epochNow: M,
+				maxRequestMs: Fe,
+				catalog: l,
+				resolveTarget: se(K, G, O, B === void 0 ? void 0 : {
+					store: a,
+					pools: B
+				})
+			}));
+		} catch (e) {
+			throw await Ge?.close(), e;
+		}
+		let Y, X = null, Ke = !1, qe = !1, Z = null, Je = !1, Ye = !1, Xe, Ze, Q = null, Qe = !1, $ = null, $e = () => {
+			if ($) return $;
+			let e = (async () => {
+				Q && !Qe && (await Q(), Qe = !0);
+				let e = (await Promise.allSettled([
+					Promise.resolve().then(() => Xe?.stop()),
+					Promise.resolve().then(() => Ze?.stop()),
+					Promise.resolve().then(() => Ge?.close())
+				])).filter((e) => e.status === "rejected").map((e) => e.reason);
+				if (e.length) throw AggregateError(e, "Rooms World command and continuation drainage remains incomplete");
+				Z && !Je && (await Z(), Je = !0), X && !Ke && (await X(), Ke = !0), J.fence(), await J.close();
+			})();
+			return $ = e, e.then(() => {
+				$ = null;
+			}, () => {
+				$ = null;
+			}), e;
+		};
+		try {
+			if (o.signal.aborted) return _("Registry Rooms API acquisition was cancelled");
+			let n = await Se(Object.freeze({
+				pluginName: o.pluginName,
+				store: a,
+				host: V,
+				withdrawal: J.withdrawal,
+				signal: o.signal,
+				...Le ? { afterFence: (n) => g.suspend(() => {
+					if (!Y) return g.fail(new e({ detail: "After-fence geometry source is not actually acquired" }));
+					try {
+						let r = t(n, ["requestId", "target"], ["requestId", "target"]), i = t(r.target, [
+							"tenantId",
+							"subjectId",
+							"kind"
+						], [
+							"tenantId",
+							"subjectId",
+							"kind"
+						]), a = ee({
+							tenantId: i.tenantId,
+							requestId: r.requestId,
+							subject: {
+								id: i.subjectId,
+								kind: i.kind
+							}
+						});
+						return (Y.migrations === void 0 ? g.void : Y.migrations.eraseSubject(a)).pipe(g.flatMap(() => Y.service.eraseSubject(a)), g.flatMap(() => Y.archives === void 0 ? g.void : Y.archives.eraseSubject(a)), g.mapError(() => new e({ detail: "After-fence geometry/archive/migration erasure remains incomplete" })));
+					} catch {
+						return g.fail(new e({ detail: "After-fence geometry requires actual captured Subject scope" }));
+					}
+				}) } : {}
+			}));
+			if (typeof n?.release != "function") return _("Rooms Subject privacy binding must retain cleanup");
+			Q = n.release.bind(n);
+			let r = n.service;
+			if (!r || typeof r.erase != "function" || typeof r.export != "function") return _("Rooms Subject privacy binding is incomplete");
+			let s = Object.freeze({
+				erase: r.erase.bind(r),
+				export: r.export.bind(r)
+			});
+			if (o.signal.aborted) return _("Registry Rooms API acquisition was cancelled");
+			let c, u;
+			if (o.worldState !== "none" && !Re) {
+				Ye = !0;
+				let e = await ve(Object.freeze({
+					...o,
+					store: a,
+					host: V,
+					withdrawal: J.withdrawal
+				}));
+				if (typeof e?.release != "function") return _("World state binding must retain cleanup");
+				Z = e.release.bind(e), c = e.source;
+				let t = Object.getOwnPropertyDescriptor(e, "clientControl");
+				if (t && !("value" in t)) return _("World client resource binding refuses accessors");
+				if (u = t?.value, o.worldClientControls !== (u !== void 0)) return _("World client resource does not match configured controls");
+				if (!c) return _("World state resource binding is incomplete");
+				if (Ye = !1, o.signal.aborted) return _("World state acquisition was cancelled");
+			}
+			if (Le) {
+				qe = !0;
+				let e = await x(Object.freeze({
+					...o,
+					store: a,
+					host: V,
+					withdrawal: J.withdrawal,
+					...o.geometryAdminControls ? { geometryControl: J.geometry } : {}
+				})), n = t(e, ["source", "release"], ["source", "release"]);
+				if (typeof n.release != "function") return _("Geometry resource binding must retain its actual cleanup");
+				if (X = n.release.bind(e), Y = te(n.source, o.worlds), (o.geometryAdminControls ?? !1) !== (Y.administration !== void 0)) return _("Geometry administration resource does not match its configured module");
+				if ((o.geometryJournalRetention ?? !1) !== (Y.retention !== void 0)) return _("Geometry retention resource does not match its configured module");
+				if (o.geometryJournalArchives !== (Y.archives !== void 0)) return _("Geometry archive resource does not match its configured module");
+				if (o.geometryAssetUrls !== (Y.assetGrants !== void 0)) return _("Geometry asset resource does not match its configured module");
+				if (o.geometryMigrations !== (Y.migrations !== void 0)) return _("Geometry migration resource does not match its configured module");
+				if (qe = !1, o.signal.aborted) return _("Geometry resource acquisition was cancelled");
+			}
+			let d = re(a, {
+				pools: B,
+				poolSelectHost: I,
+				catalog: l,
+				directory: K,
+				recovery: Be,
+				adoption: J.adoption,
+				control: J.control,
+				match: J.match,
+				membership: G,
+				secrets: j,
+				epochNow: M,
+				region: () => O,
+				maxListedRooms: je,
+				maxHostAttempts: Me,
+				maxCheckpointBytes: z,
+				...L === void 0 ? {} : { lockstepRecovery: {
+					maxTicks: L.maxTicks,
+					maxJournalBytes: L.maxJournalBytes,
+					maxPlayers: L.maxPlayers
+				} },
+				strategies: {
+					...P === void 0 ? {} : { selectHost: P },
+					seatToken: De
+				},
+				...N === void 0 ? {} : { snapshotBlobs: N },
+				...C === void 0 ? {} : { admission: C },
+				...ye === void 0 ? {} : { seatAttributes: ye }
+			});
+			if (Re) {
+				let e = w.leaseConnection ?? (k.startsWith("redis:") ? k : void 0);
+				if (T === "api" && !e) return _("World authority \"api\" needs a Redis lease connection");
+				let t = T === "api" ? await U(ge.pipe(g.provide(_e({
+					consumer: o.pluginName,
+					connection: e
+				})), g.provideService(he, H))) : void 0, n = ue({
+					store: a,
+					worlds: o.worlds,
+					catalog: l,
+					transitionsEnabled: o.worldState === "transitions",
+					clientControls: o.worldClientControls,
+					authority: T,
+					world: J.world,
+					ownership: K.observeOwnership.bind(K),
+					selectHost: (e, t) => K.selectHost(O, {
+						name: e,
+						tenantId: t
+					}).pipe(g.map((e) => e.id)),
+					reserve: (e, t) => d.reserve({
+						mode: "joinById",
+						roomId: e
+					}, t),
+					...t === void 0 ? {} : { hot: t },
+					signing: {
+						secrets: j,
+						seatTtlMs: be,
+						graceMs: Ae,
+						hostHeartbeatTtlMs: R
+					},
+					epochNow: M,
+					...w.maxBytes === void 0 ? {} : { maxBytes: w.maxBytes }
+				}, D ? {
+					parties: D,
+					runWithAppServices: V.runWithAppServices.bind(V)
+				} : void 0);
+				if (Ve = n.commands, Z = n.release.bind(n), c = n.source, u = n.clientControl, n.runGroupsDue && (V.workloads === void 0 || V.workloads.includes("reapers"))) {
+					let e = n.runGroupsDue;
+					Xe = V.scheduleCoordinated("rooms.world-groups." + me("sha256").update(o.pluginName).digest("hex").slice(0, 32), 1e3, async () => ({
+						idle: (await U(e())).visited === 0,
+						nextDueInMs: 1e3
+					}));
+				}
+			}
+			let f = le(a, {
+				pools: B,
+				poolSelectHost: I,
+				membership: G,
+				directory: K,
+				recovery: Be,
+				adoption: J.adoption,
+				maxHosts: Ne,
+				maxRoomsPerHost: Pe,
+				maxCheckpointBytes: z,
+				snapshotCodec: y,
+				...L === void 0 ? {} : { lockstep: L },
+				...P === void 0 ? {} : { strategies: { selectHost: P } },
+				...N === void 0 ? {} : { snapshotBlobs: N }
+			}), p = ne(K.observeOwnership.bind(K), J.kick, (e, t, n) => g.tryPromise(async () => (await a.query({
+				table: i,
+				predicate: de(fe("tenantId", e), fe("state", "live"), ...t === null ? [] : [pe("id", t)]),
+				order: [{
+					column: "id",
+					direction: "asc"
+				}],
+				take: n,
+				skip: void 0,
+				projection: ["id"]
+			})).map((e) => String(e.id))), o.geometryAdminControls ? J.geometry : void 0), m = C === void 0 ? void 0 : ie(a, {
+				admission: C,
+				kick: p.kick,
+				now: M
+			});
+			m && (V.workloads === void 0 || V.workloads.includes("reapers")) && (Ze = V.scheduleCoordinated("rooms.access." + me("sha256").update(o.pluginName).digest("hex").slice(0, 32), 5e3, async () => ({
+				idle: (await U(m.run())).visited === 0,
+				nextDueInMs: 5e3
+			})));
+			let ae = (t) => m === void 0 ? g.succeed({
+				visited: 0,
+				renewed: 0,
+				kicked: 0
+			}) : m.recheck(t).pipe(g.mapError(() => new e({ detail: "Room access could not be checked again" })));
+			return Object.freeze({
+				pools: B,
+				reservation: d,
+				privacy: s,
+				reaper: f,
+				moderation: Object.freeze({
+					...p,
+					recheckAccess: ae
+				}),
+				worldState: c,
+				worldClientControl: u,
+				geometry: Y,
+				release: $e
+			});
+		} catch (t) {
+			t instanceof d && (qe ? X = t.retryCleanup : Ye ? Z = t.retryCleanup : Q = t.retryCleanup);
+			try {
+				await $e();
+			} catch {
+				throw new d($e);
+			}
+			throw new e({ detail: "Registry Rooms API acquisition did not complete" });
+		}
+	};
+};
+//#endregion
+export { y as registryRoomsApiBinder };