@voltro/plugin-rooms 0.0.0-stage → 0.87.0

package/dist/schemaHistory.js

@@ -0,0 +1,98 @@
+import { RoomAuthoringError as e } from "./errors.js";
+//#region src/schemaHistory.ts
+function t(t, n) {
+	throw new e({
+		room: t,
+		detail: n
+	});
+}
+var n = (e) => JSON.stringify([e.scope, e.id]), r = (e, r = {}) => {
+	let i = {
+		maxRooms: 256,
+		maxHistoricalFields: 16384,
+		...r
+	};
+	for (let e of Object.values(i)) (!Number.isSafeInteger(e) || e < 1) && t("catalog", "Schema history budgets must be positive safe integers");
+	let a = (e) => typeof e == "object" && !!e && !Array.isArray(e);
+	if (!a(e) || e.version !== 1 || !a(e.rooms)) return t("catalog", "Malformed Rooms schema history");
+	let o = Object.keys(e.rooms).sort();
+	if (o.length > i.maxRooms) return t("catalog", "Room schema history exceeds its room budget");
+	let s = Object.create(null);
+	for (let r of o) {
+		let o = e.rooms[r];
+		if (!r.trim() || !a(o) || typeof o.schemaHash != "number" || !Number.isSafeInteger(o.schemaHash) || o.schemaHash < 0 || o.schemaHash > 4294967295 || typeof o.revision != "number" || !Number.isSafeInteger(o.revision) || o.revision < 1 || !Array.isArray(o.fields) || o.fields.length > i.maxHistoricalFields) return t(r, "Malformed room field history");
+		let c = /* @__PURE__ */ new Set(), l = [];
+		for (let e of o.fields) {
+			if (!a(e) || typeof e.scope != "string" || !e.scope.startsWith("root") || typeof e.name != "string" || !e.name || typeof e.id != "number" || !Number.isSafeInteger(e.id) || e.id < 1 || typeof e.active != "boolean") return t(r, "Malformed historical field identity");
+			let i = {
+				scope: e.scope,
+				name: e.name,
+				id: e.id,
+				active: e.active
+			};
+			if (c.has(n(i))) return t(r, "Duplicate historical field identity");
+			c.add(n(i)), l.push(Object.freeze(i));
+		}
+		l.sort((e, t) => e.scope < t.scope ? -1 : e.scope > t.scope ? 1 : e.id - t.id), s[r] = Object.freeze({
+			schemaHash: o.schemaHash,
+			revision: o.revision,
+			fields: Object.freeze(l)
+		});
+	}
+	return Object.freeze({
+		version: 1,
+		rooms: Object.freeze(s)
+	});
+}, i = (e, i, a, o, s = {}) => {
+	let c = {
+		maxRooms: 256,
+		maxHistoricalFields: 16384,
+		...s
+	};
+	(!i.trim() || !Number.isSafeInteger(a) || a < 0 || a > 4294967295) && t(i, "Invalid room schema identity");
+	for (let e of Object.values(c)) (!Number.isSafeInteger(e) || e < 1) && t(i, "Schema history budgets must be positive safe integers");
+	let l = r(e ?? {
+		version: 1,
+		rooms: {}
+	}, c), u = Object.keys(l.rooms);
+	!Object.hasOwn(l.rooms, i) && u.length >= c.maxRooms && t(i, "Room schema history exceeds its room budget");
+	let d = Object.hasOwn(l.rooms, i) ? l.rooms[i] : void 0, f = new Map((d?.fields ?? []).map((e) => [n(e), e])), p = (e) => {
+		(!e || typeof e.scope != "string" || !e.scope.startsWith("root") || typeof e.name != "string" || !e.name || !Number.isSafeInteger(e.id) || e.id < 1) && t(i, "Malformed historical field identity");
+	};
+	o.length > c.maxHistoricalFields && t(i, "Field manifest exceeds its history budget");
+	let m = /* @__PURE__ */ new Map();
+	for (let e of o) {
+		p(e);
+		let r = n(e), a = f.get(r);
+		m.has(r) && t(i, "Duplicate current field identity"), a && (!a.active || a.name !== e.name) && t(i, `Field id ${e.id} in ${e.scope} cannot be reused`), m.set(r, Object.freeze({
+			scope: e.scope,
+			name: e.name,
+			id: e.id,
+			active: !0
+		}));
+	}
+	let h = [...f].map(([e, t]) => m.get(e) ?? Object.freeze({
+		scope: t.scope,
+		name: t.name,
+		id: t.id,
+		active: !1
+	}));
+	for (let [e, t] of m) f.has(e) || h.push(t);
+	h.length > c.maxHistoricalFields && t(i, "Historical field identities exceed their budget");
+	let g = d ? d.revision + (d.schemaHash === a ? 0 : 1) : 1;
+	Number.isSafeInteger(g) || t(i, "Schema history revision is exhausted"), h.sort((e, t) => e.scope < t.scope ? -1 : e.scope > t.scope ? 1 : e.id - t.id);
+	let _ = Object.freeze({
+		schemaHash: a,
+		revision: g,
+		fields: Object.freeze(h)
+	});
+	return Object.freeze({
+		version: 1,
+		rooms: Object.freeze({
+			...l.rooms,
+			[i]: _
+		})
+	});
+};
+//#endregion
+export { i as advanceRoomSchemaHistory, r as validateRoomSchemaHistory };

package/dist/seatStore.js

@@ -0,0 +1,151 @@
+import { ProtocolError as e, SeatExpired as t } from "./errors.js";
+import { ROOM_SEATS_TABLE as n } from "./identities.js";
+import { assertRoomSubjectAdmission as r } from "./subjectAdmission.js";
+import { worldTargetSeatBindingFromReceipt as i } from "./worldSeatBinding.js";
+import { captureRoomSeatInputReceipt as a } from "./inputReceipts.js";
+import { WorldSourceSeatPending as o } from "./worldSourceSeatPending.js";
+import { and as s, eq as c, gt as l } from "@voltro/database";
+import { Effect as u } from "effect";
+//#region src/seatStore.ts
+var d = (e) => s(c("roomId", e.roomId), c("sessionId", e.sessionId), c("tenantId", e.tenantId), c("subjectId", e.subjectId), c("epoch", e.epoch), c("nonce", e.nonce), c("role", e.role)), f = (t) => u.tryPromise({
+	try: t,
+	catch: (t) => t instanceof o ? t : new e({ detail: "Durable Rooms seat operation failed" })
+}), p = (t) => {
+	if (!/^[a-f0-9]{64}$/.test(t)) throw new e({ detail: "Seat credential digest is invalid" });
+	return t;
+}, m = async (u, f, m, h) => {
+	await r(u, f);
+	let g = s(d(f), c("token", p(m)), c("state", "reserved"), c("expiresAt", new Date(f.expiresAt)), l("expiresAt", h)), _ = (await u.query({
+		table: n,
+		predicate: g,
+		order: [],
+		take: 1,
+		skip: void 0,
+		projection: [
+			"id",
+			"inputReceipt",
+			"reservationBatchReceipt",
+			"worldSourceTransitionId"
+		],
+		lock: "update"
+	}))[0];
+	if (!_) throw new t({ sessionId: f.sessionId });
+	if (_.worldSourceTransitionId != null) throw new o();
+	let v = a(_.inputReceipt), y = i(_.reservationBatchReceipt);
+	if (v?.discardedThrough !== void 0 && !y) throw new e({ detail: "Discarded input cursor requires its durable World Seat binding" });
+	if (v && v.checkpointEpoch > f.epoch) throw new e({ detail: "Seat input receipt belongs to a newer ownership epoch" });
+	if (await u.updateMany("_voltro_room_seats", {
+		state: "connected",
+		updatedAt: h
+	}, { where: s(g, c("id", _.id)) }) !== 1) throw new t({ sessionId: f.sessionId });
+	return Object.freeze({
+		lastAppliedSeq: v?.lastAppliedSeq ?? -1,
+		...v?.discardedThrough === void 0 ? {} : { discardedThrough: v.discardedThrough },
+		...y ? { worldTarget: y } : {}
+	});
+}, h = async (t, i, a) => {
+	await r(t, i);
+	let l = await t.query({
+		table: n,
+		predicate: s(d(i), c("token", p(a)), c("state", "connected")),
+		order: [],
+		take: 2,
+		skip: void 0,
+		projection: ["id", "worldSourceTransitionId"],
+		lock: "update"
+	});
+	if (l.length !== 1) throw new e({ detail: "Room Seat lost its connected admission" });
+	if (l[0].worldSourceTransitionId != null) throw new o();
+}, g = (i, a, o) => {
+	if (!Number.isFinite(o) || o <= 0) throw new e({ detail: "Room seat grace must be a positive duration" });
+	let l = () => {
+		let t = a();
+		if (!Number.isFinite(t) || t < 0) throw new e({ detail: "Room seat wall clock is invalid" });
+		return new Date(t);
+	};
+	return Object.freeze({
+		reserve: (e, a, o) => {
+			let s = Object.freeze({ ...a });
+			return f(async () => {
+				let a = l();
+				if (s.expiresAt <= a.getTime()) throw new t({ sessionId: s.sessionId });
+				await r(i, s);
+				let { subjectType: c, subjectKind: u, attributes: d, ...f } = s;
+				await i.insert(n, {
+					id: e,
+					...f,
+					attributes: d ?? null,
+					token: p(o),
+					state: "reserved",
+					expiresAt: new Date(s.expiresAt),
+					graceUntil: null,
+					inputReceipt: null,
+					reservationBatchKey: null,
+					reservationBatchReceipt: null,
+					reservationBatchReissueReceipt: null,
+					worldSourceTransitionId: null,
+					createdAt: a,
+					updatedAt: a
+				});
+			});
+		},
+		revalidate: (e, t) => f(() => i.transactional((n) => h(n, e, t))),
+		consume: (n, r) => {
+			let a = Object.freeze({ ...n });
+			return u.uninterruptible(u.tryPromise({
+				try: () => i.transactional((e) => m(e, a, r, l())),
+				catch: (n) => n instanceof t || n instanceof e ? n : new e({ detail: "Durable Rooms seat admission failed" })
+			}));
+		},
+		disconnect: (e, t, r) => f(async () => {
+			let a = l(), u = t === "reconnecting";
+			await i.updateMany(n, {
+				state: u ? "grace" : "released",
+				graceUntil: u ? new Date(a.getTime() + o) : null,
+				updatedAt: a
+			}, { where: s(d(e), c("token", p(r)), c("state", "connected")) });
+		}),
+		exportSubject: (e, t) => f(async () => {
+			let r = await i.query({
+				table: n,
+				predicate: s(c("tenantId", e), c("subjectId", t)),
+				order: [],
+				take: void 0,
+				skip: void 0,
+				projection: [
+					"id",
+					"roomId",
+					"sessionId",
+					"subjectId",
+					"tenantId",
+					"epoch",
+					"role",
+					"state",
+					"inputReceipt",
+					"expiresAt",
+					"graceUntil",
+					"createdAt",
+					"updatedAt"
+				]
+			}), a = [
+				"id",
+				"roomId",
+				"sessionId",
+				"subjectId",
+				"tenantId",
+				"epoch",
+				"role",
+				"state",
+				"inputReceipt",
+				"expiresAt",
+				"graceUntil",
+				"createdAt",
+				"updatedAt"
+			];
+			return r.map((e) => Object.fromEntries(a.filter((t) => Object.hasOwn(e, t)).map((t) => [t, e[t]])));
+		}),
+		eraseSubject: (e, t) => f(() => i.deleteMany(n, { where: s(c("tenantId", e), c("subjectId", t)) }))
+	});
+};
+//#endregion
+export { m as consumeRoomSeatInTransaction, g as dataStoreRoomSeats, h as revalidateRoomSeatInTransaction };

package/dist/seatStrategyFixtures.js

@@ -0,0 +1,52 @@
+import { ProtocolError as e } from "./errors.js";
+import { resolveRoomSeatTokenStrategies as t, signRoomSeat as n, signRoomSeatWithStrategies as r, verifiedRoomSeatClaims as i } from "./seats.js";
+import { Effect as a } from "effect";
+import { randomBytes as o } from "node:crypto";
+//#region src/seatStrategyFixtures.ts
+var s = () => ({
+	roomId: "room",
+	sessionId: "seat",
+	tenantId: "tenant",
+	subjectId: "player",
+	epoch: 1,
+	role: "player",
+	nonce: "fixture-generation",
+	expiresAt: 2e4
+}), c = () => ({ current: {
+	kid: "fixture-seat",
+	secret: o(32).toString("base64url")
+} }), l = {
+	sign: (e, t, r) => new Uint8Array([254, ...n(e, t, r)]),
+	verify: (t, n, r) => {
+		if (t[0] !== 254) throw new e({ detail: "Fixture seat framing is absent" });
+		return i(t.subarray(1), n, r);
+	}
+}, u = (n) => a.sync(() => {
+	let i = s(), a = c(), o = t(n ? l : {}), u = r(i, a, 1e3, o), d = o.verify(u, a, 1e3);
+	if (Object.keys(i).some((e) => d[e] !== i[e])) throw new e({ detail: "Fixture seat strategy changed authority" });
+	return u[0] === 254 ? "framed" : "session";
+}), d = {
+	kind: "slot",
+	defaultImplementation: n,
+	defaultProbe: {
+		run: () => u(!1),
+		expected: "session"
+	},
+	overrideProbe: {
+		run: () => u(!0),
+		expected: "framed"
+	}
+}, f = {
+	kind: "slot",
+	defaultImplementation: i,
+	defaultProbe: {
+		run: () => u(!1),
+		expected: "session"
+	},
+	overrideProbe: {
+		run: () => u(!0),
+		expected: "framed"
+	}
+};
+//#endregion
+export { d as roomSeatSignSlotFixture, f as roomSeatVerifySlotFixture };

package/dist/seatSubject.js

@@ -0,0 +1,32 @@
+import { ProtocolError as e, RoomForbidden as t } from "./errors.js";
+import { resolveIdentityAuthority as n } from "@voltro/protocol";
+import { Effect as r } from "effect";
+//#region src/seatSubject.ts
+var i = (e) => {
+	if (e.subjectId === null) return {
+		type: "anonymous",
+		id: null,
+		tenantId: e.tenantId
+	};
+	let t = e.subjectType ?? "user";
+	return t === "user" ? {
+		type: t,
+		id: e.subjectId,
+		tenantId: e.tenantId,
+		...e.subjectKind === "guest" ? { kind: "guest" } : {}
+	} : {
+		type: t,
+		id: e.subjectId,
+		tenantId: e.tenantId
+	};
+}, a = (i, a, o) => r.flatMap(r.tryPromise({
+	try: () => n(i, {
+		origin: "room",
+		headers: {},
+		clientId: void 0,
+		store: o.getStore?.()
+	}, o.authority),
+	catch: () => new e({ detail: "Room seat authority resolution failed" })
+}), (n) => n.kind === "resolved" ? r.succeed(n.subject) : n.kind === "vetoed" ? r.fail(new t({ roomId: a })) : r.fail(new e({ detail: "Room seat authority is unavailable" }))), o = (e = {}) => (t) => a(i(t), t.roomId, e), s = (e = {}) => (t) => a(t, "", e);
+//#endregion
+export { s as roomControlSubjectResolver, i as roomSeatSubjectIdentity, o as roomSeatSubjectResolver };

package/dist/seats.js

@@ -0,0 +1,130 @@
+import { ProtocolError as e, RoomForbidden as t, SeatExpired as n } from "./errors.js";
+import { captureRoomSeatAttributes as r } from "./room.js";
+import { Result as i, Schema as a } from "effect";
+import { createHash as o } from "node:crypto";
+import { MIN_SESSION_SECRET_LENGTH as s, signSession as c, verifySessionKeyed as l } from "@voltro/protocol/session";
+//#region src/seats.ts
+var u = a.Struct({
+	purpose: a.Literal("voltro.rooms.seat.v1"),
+	roomId: a.NonEmptyString,
+	sessionId: a.NonEmptyString,
+	subjectId: a.NullOr(a.NonEmptyString),
+	subjectType: a.optionalKey(a.Literals([
+		"user",
+		"apiKey",
+		"serviceAccount"
+	])),
+	subjectKind: a.optionalKey(a.Literal("guest")),
+	tenantId: a.NonEmptyString,
+	epoch: a.Int.pipe(a.check(a.isGreaterThanOrEqualTo(0))),
+	nonce: a.NonEmptyString,
+	expiresAt: a.Number.pipe(a.check(a.isFinite()), a.check(a.isGreaterThan(0))),
+	role: a.Literals(["player", "spectator"]),
+	attributes: a.optionalKey(a.Record(a.String, a.Union([
+		a.String,
+		a.Number,
+		a.Boolean,
+		a.Null
+	])))
+}), d = {
+	roomId: !0,
+	sessionId: !0,
+	subjectId: !0,
+	subjectType: !0,
+	subjectKind: !0,
+	tenantId: !0,
+	epoch: !0,
+	nonce: !0,
+	expiresAt: !0,
+	role: !0,
+	attributes: !0
+}, f = (e, t, n) => e === "attributes" ? t.attributes === void 0 == (n.attributes === void 0) && (t.attributes === void 0 || JSON.stringify(r(t.roomId, t.attributes)) === JSON.stringify(r(n.roomId, n.attributes))) : t[e] === n[e], p = (t) => {
+	if (t.attributes === void 0) return t;
+	try {
+		return {
+			...t,
+			attributes: r(t.roomId, t.attributes)
+		};
+	} catch {
+		throw new e({ detail: "Invalid Room seat attributes" });
+	}
+}, m = (t) => {
+	for (let n of [t.current, ...t.previous ? [t.previous] : []]) if (!n || typeof n.kid != "string" || !n.kid.trim() || typeof n.secret != "string" || n.secret.length < s) throw new e({ detail: "Project-owned Rooms signing keys are required; there is no fallback" });
+	if (t.previous?.kid === t.current.kid) throw new e({ detail: "Rooms rotation keys require distinct identities" });
+}, h = (e) => o("sha256").update(e).digest("hex"), g = (t, r, i) => {
+	m(r);
+	let o = p(a.decodeUnknownSync(u)({
+		...t,
+		purpose: "voltro.rooms.seat.v1"
+	}));
+	if (!Number.isFinite(i) || i < 0 || o.expiresAt <= i) throw new n({ sessionId: o.sessionId });
+	if (!r.current.secret || !r.current.kid) throw new e({ detail: "Rooms signing key is required" });
+	return new TextEncoder().encode(c({
+		type: "serviceAccount",
+		id: o.sessionId,
+		tenantId: o.tenantId,
+		auditActorId: null,
+		metadata: o
+	}, r.current, {
+		now: () => i,
+		ttlSeconds: Math.ceil((o.expiresAt - Math.floor(i / 1e3) * 1e3) / 1e3)
+	}));
+}, _ = (t, r, o) => {
+	if (m(r), !Number.isFinite(o) || o < 0 || t.byteLength < 1 || t.byteLength > 8192) throw new e({ detail: "Invalid seat token or clock" });
+	let s;
+	try {
+		s = new TextDecoder("utf-8", { fatal: !0 }).decode(t);
+	} catch {
+		throw new e({ detail: "Invalid seat token encoding" });
+	}
+	let c = l(s, r, { now: () => o });
+	if (!c || c.subject.type !== "serviceAccount") throw new n({ sessionId: "" });
+	let d = a.decodeUnknownResult(u)(c.subject.metadata);
+	if (i.isFailure(d)) throw new e({ detail: "Token is not a Rooms seat credential" });
+	let f = p(d.success);
+	if (c.subject.id !== f.sessionId || c.subject.tenantId !== f.tenantId) throw new e({ detail: "Seat identity does not match its signed carrier" });
+	if (f.expiresAt <= o) throw new n({ sessionId: f.sessionId });
+	let { purpose: h, ...g } = f;
+	return Object.freeze(g);
+}, v = (e, r, i, a, o = _) => {
+	let s = x(e, r, i, o);
+	if (s.roomId !== a.roomId || s.tenantId !== a.tenantId) throw new t({ roomId: a.roomId });
+	if (s.epoch !== a.epoch) throw new n({ sessionId: s.sessionId });
+	return s;
+}, y = (t = {}) => {
+	if (!t || typeof t != "object" || Array.isArray(t) || Object.keys(t).some((e) => !["sign", "verify"].includes(e)) || t.sign !== void 0 && typeof t.sign != "function" || t.verify !== void 0 && typeof t.verify != "function") throw new e({ detail: "Invalid Room seat-token strategy slots" });
+	return Object.freeze({
+		sign: t.sign ?? g,
+		verify: t.verify ?? _
+	});
+}, b = (t, r) => {
+	if (!Number.isFinite(r) || r < 0 || !t || typeof t != "object") throw new e({ detail: "Invalid Room seat strategy identity or clock" });
+	let o = a.decodeUnknownResult(u)({
+		...t,
+		purpose: "voltro.rooms.seat.v1"
+	});
+	if (i.isFailure(o)) throw new e({ detail: "Room seat strategy returned malformed identity" });
+	if (o.success.expiresAt <= r) throw new n({ sessionId: o.success.sessionId });
+	let { purpose: s, ...c } = p(o.success);
+	return Object.freeze(c);
+}, x = (r, i, a, o = _) => {
+	if (m(i), !(r instanceof Uint8Array) || r.byteLength < 1 || r.byteLength > 8192) throw new e({ detail: "Invalid Room seat-token strategy bytes" });
+	try {
+		return b(o(Uint8Array.from(r), structuredClone(i), a), a);
+	} catch (r) {
+		throw r instanceof e || r instanceof n || r instanceof t ? r : new e({ detail: "Room seat verification strategy failed" });
+	}
+}, S = (t, r, i, a) => {
+	m(r);
+	let o = b(t, i), s;
+	try {
+		s = a.sign(structuredClone(o), structuredClone(r), i);
+	} catch (t) {
+		throw t instanceof e || t instanceof n ? t : new e({ detail: "Room seat signing strategy failed" });
+	}
+	let c = x(s, r, i, a.verify);
+	if (Object.keys(d).some((e) => !f(e, c, o))) throw new e({ detail: "Room seat-token strategies changed the issued identity" });
+	return Uint8Array.from(s);
+};
+//#endregion
+export { m as assertRoomSeatSecrets, y as resolveRoomSeatTokenStrategies, h as roomSeatTokenDigest, g as signRoomSeat, S as signRoomSeatWithStrategies, _ as verifiedRoomSeatClaims, v as verifyRoomSeat, x as verifyRoomSeatWithStrategy };