cajonzero 0.1.0 → 0.1.2

package/dist/serve.js

@@ -5343,7 +5343,6 @@ var KEY_PREFIX = {
   account: "account",
   session: "session",
   ban: "ban",
-  ratelimit: "ratelimit",
   settings: "settings",
   mapStorage: "mapstorage"
 };
@@ -5375,9 +5374,6 @@ function banAccountKey(subjectId) {
 function banIdentityKey(kind, hash) {
   return `ban:identity:${kind}:${seg2(hash)}`;
 }
-function ratelimitKey(scope, hash) {
-  return `ratelimit:${seg2(scope)}:${seg2(hash)}`;
-}
 function settingsKey(key) {
   return `settings:${seg2(key)}`;
 }
@@ -5420,12 +5416,6 @@ function parseKey(key) {
       }
       return void 0;
     }
-    case KEY_PREFIX.ratelimit: {
-      if (parts2.length !== 3) return void 0;
-      const scope = decode(parts2[1]);
-      const hash = decode(parts2[2]);
-      return scope === void 0 || hash === void 0 ? void 0 : { kind: "ratelimit", scope, hash };
-    }
     case KEY_PREFIX.settings: {
       if (parts2.length !== 2) return void 0;
       const settingKey = decode(parts2[1]);
@@ -5649,7 +5639,6 @@ function parseEntry(value, index) {
   const author = optionalString(record.author, `maps[${index}].author`);
   const version = optionalString(record.version, `maps[${index}].version`);
   const cover = optionalString(record.cover, `maps[${index}].cover`);
-  const etag = optionalString(record.etag, `maps[${index}].etag`);
   return {
     slug,
     root,
@@ -5658,7 +5647,6 @@ function parseEntry(value, index) {
     ...author !== void 0 ? { author } : {},
     ...version !== void 0 ? { version } : {},
     ...cover !== void 0 ? { cover } : {},
-    ...etag !== void 0 ? { etag } : {},
     ...assetRoot !== void 0 ? { assetRoot: normalizeRootUrl(assetRoot) } : {}
   };
 }
@@ -14282,79 +14270,24 @@ function buildInitialWorld(seed) {
   return world;
 }
 
-// src/core/maps/seed-cache.ts
-var SEED_CACHE_PREFIX = "map:seed";
-function seedCacheKey(slug, revision) {
-  const safeRevision = encodeURIComponent(revision).slice(0, 160);
-  return `${SEED_CACHE_PREFIX}:${encodeURIComponent(slug)}:${safeRevision}`;
-}
-function toBase64(bytes) {
-  let binary = "";
-  const block = 32768;
-  for (let offset = 0; offset < bytes.length; offset += block) {
-    binary += String.fromCharCode(...bytes.subarray(offset, offset + block));
-  }
-  return btoa(binary);
-}
-function fromBase64(value) {
-  const binary = atob(value);
-  const bytes = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i += 1) {
-    bytes[i] = binary.charCodeAt(i);
-  }
-  return bytes;
-}
-function encode(seed) {
-  const wire = {
-    version: WORLD_SEED_VERSION,
-    seed: {
-      ...seed,
-      voxels: seed.voxels === null ? null : {
-        shape: seed.voxels.shape,
-        chunkCount: seed.voxels.chunkCount,
-        chunkBlobs: seed.voxels.chunkBlobs.map(toBase64),
-        chunkHashes: seed.voxels.chunkHashes.slice()
-      }
-    }
-  };
-  return JSON.stringify(wire);
-}
-function decode2(raw) {
+// src/core/maps/block-info.ts
+var BLOCK_INFO_HASH = "QmW2E9E8ipYUifsCfkMj5SULYMYbFQvP6BQxo52atXw7Zj";
+function decodeBlockInfo(bytes) {
   try {
-    const wire = JSON.parse(raw);
-    if (wire.version !== WORLD_SEED_VERSION || typeof wire.seed !== "object" || wire.seed === null) {
-      return null;
-    }
-    const { voxels, ...rest } = wire.seed;
-    return {
-      ...rest,
-      voxels: voxels === null ? null : {
-        shape: voxels.shape,
-        chunkCount: voxels.chunkCount,
-        chunkBlobs: voxels.chunkBlobs.map(fromBase64),
-        chunkHashes: Array.isArray(voxels.chunkHashes) ? voxels.chunkHashes : []
-      }
-    };
+    return BlockInfoSchema.patch(BlockInfoSchema.identity, new MuReadStream(bytes));
   } catch {
     return null;
   }
 }
-async function readCachedSeed(kv, key) {
+async function loadBlockInfo(reader, worldId, hash = BLOCK_INFO_HASH) {
   try {
-    const raw = await kv.get(key);
-    return raw === null ? null : decode2(raw);
+    const bytes = await reader.read(`worlds/${worldId}/data/blobs/${hash}`);
+    if (bytes === null || bytes.length === 0) return null;
+    return decodeBlockInfo(bytes);
   } catch {
     return null;
   }
 }
-async function writeCachedSeed(kv, key, seed, ttlSeconds) {
-  if (ttlSeconds <= 0) return;
-  try {
-    const options = ttlSeconds >= 60 ? { expirationTtl: ttlSeconds } : void 0;
-    await kv.put(key, encode(seed), options);
-  } catch {
-  }
-}
 
 // src/core/maps/http.ts
 var MapSourceError = class extends Error {
@@ -14474,12 +14407,6 @@ async function resolveWorldId(source) {
   return assertWorldId(candidate);
 }
 async function loadWorldSeedFromHttp(entry, options = {}) {
-  const revision = entry.etag ?? entry.version;
-  const cacheKey = options.kv !== void 0 && revision !== void 0 ? seedCacheKey(entry.slug, revision) : void 0;
-  if (cacheKey !== void 0 && options.kv !== void 0) {
-    const cached = await readCachedSeed(options.kv, cacheKey);
-    if (cached !== null) return cached;
-  }
   const source = new HttpMapSource(entry.root, options);
   const worldId = entry.worldId ?? await resolveWorldId(source);
   const manifest = await source.readJson(
@@ -14488,14 +14415,13 @@ async function loadWorldSeedFromHttp(entry, options = {}) {
   if (manifest === null) {
     fail2("MAP_NO_WORLD", `worlds/${worldId}/manifest.json is missing or not JSON`);
   }
-  const seed = await resolveWorldSeed(
+  return resolveWorldSeed(
     { worldId, manifest, reader: source },
     { concurrency: options.concurrency ?? DEFAULT_CONCURRENCY }
-  );
-  if (cacheKey !== void 0 && options.kv !== void 0) {
-    await writeCachedSeed(options.kv, cacheKey, seed, options.cacheTtlSeconds ?? 0);
-  }
-  return seed;
+  ).then(async (seed) => {
+    const blockInfo = await loadBlockInfo(source, worldId);
+    return blockInfo === null ? seed : { ...seed, blockInfo };
+  });
 }
 var MEBIBYTE = 1024 * 1024;
 var ZERO_PLAYER_TIMEOUT_DEFAULT_MS = 48e4;
@@ -15637,34 +15563,6 @@ function banDetails(input, at) {
   const expiresAt = input.expiresAt ?? (input.durationSeconds === void 0 ? void 0 : at + input.durationSeconds * 1e3);
   return { reason: input.reason, expiresAt, createdBy: input.createdBy };
 }
-function createRateLimitsRepo(store, now) {
-  const repo = {
-    async increment(scope, hash, options = {}) {
-      const windowSeconds = Math.max(1, options.windowSeconds ?? 60);
-      const amount = options.amount ?? 1;
-      const at = now();
-      const current = await repo.get(scope, hash);
-      const windowStart = current !== void 0 && current.expiresAt > at ? current.windowStart : at;
-      const expiresAt = windowStart + windowSeconds * 1e3;
-      const next = {
-        count: (current !== void 0 && current.expiresAt > at ? current.count : 0) + amount,
-        windowStart,
-        expiresAt
-      };
-      const ttl = Math.max(1, Math.ceil((expiresAt - at) / 1e3));
-      await store.setItem(ratelimitKey(scope, hash), next, { ttl });
-      return next;
-    },
-    async get(scope, hash) {
-      const record = await store.getItem(ratelimitKey(scope, hash));
-      return record ?? void 0;
-    },
-    async reset(scope, hash) {
-      await store.removeItem(ratelimitKey(scope, hash));
-    }
-  };
-  return repo;
-}
 function createSettingsRepo(store) {
   return {
     async get(key) {
@@ -15929,7 +15827,6 @@ function createRepos(store, options = {}) {
     accounts: createAccountsRepo(store, now),
     sessions: createSessionsRepo(store, now),
     bans: createBansRepo(store, now),
-    ratelimits: createRateLimitsRepo(store, now),
     settings: createSettingsRepo(store),
     mapStorage: (scope, namespace) => createMapStorageRepo(store, {
       scope,
@@ -16013,9 +15910,6 @@ function resolveAdminToken(env) {
 function resolveEnvironment(env) {
   return providers.environment?.(env);
 }
-function resolveMapSeedKv(env) {
-  return providers.mapSeedKv?.(env);
-}
 function resolveRooms(env) {
   return providers.rooms?.(env);
 }
@@ -16041,7 +15935,8 @@ function createSnapshot(input) {
     frameSkip: input.frameSkip,
     seed: input.seed ?? 0,
     engine: input.engine,
-    clients: input.clients.map((client) => ({ ...client }))
+    clients: input.clients.map((client) => ({ ...client })),
+    ...input.map !== void 0 ? { map: { ...input.map } } : {}
   };
 }
 function serializeSnapshot(snapshot2) {
@@ -16060,9 +15955,19 @@ function deserializeSnapshot(serialized) {
     frameSkip: parsed.frameSkip,
     seed: parsed.seed,
     engine: parsed.engine,
-    clients: parsed.clients.map((client) => ({ ...client }))
+    clients: parsed.clients.map((client) => ({ ...client })),
+    ...parsed.map !== void 0 && parsed.map !== null ? {
+      map: {
+        slug: parsed.map.slug,
+        root: parsed.map.root,
+        ...parsed.map.worldId !== void 0 ? { worldId: parsed.map.worldId } : {}
+      }
+    } : {}
   };
 }
+function snapshotMatchesMap(snapshot2, map) {
+  return snapshot2 !== void 0 && snapshot2.slug === map.slug && snapshot2.root === map.root && (snapshot2.worldId ?? null) === (map.worldId ?? null);
+}
 
 // src/core/room/skin-sync.ts
 var ROOM_SKIN_UPDATE_PARAM = "cajonzeroSkinUpdate";
@@ -23620,9 +23525,7 @@ function parseMapBootstrap(url) {
       return void 0;
     }
   }
-  const etag = textParam(url, "cajonzeroEtag");
   const version = textParam(url, "cajonzeroVersion");
-  const cacheTtlSeconds = numberParam(url, "cajonzeroCacheTtl", 0, 31536e3);
   const maxDownloadBytes = numberParam(url, "cajonzeroMaxBytes", 1024, 1024 * 1024 * 1024);
   const concurrency = numberParam(url, "cajonzeroConcurrency", 1, 64);
   const requestTimeoutMs = numberParam(url, "cajonzeroTimeout", 100, 12e4);
@@ -23630,9 +23533,7 @@ function parseMapBootstrap(url) {
     slug,
     root,
     ...worldId !== void 0 ? { worldId } : {},
-    ...etag !== void 0 ? { etag } : {},
     ...version !== void 0 ? { version } : {},
-    ...cacheTtlSeconds !== void 0 ? { cacheTtlSeconds } : {},
     ...maxDownloadBytes !== void 0 ? { maxDownloadBytes } : {},
     ...concurrency !== void 0 ? { concurrency } : {},
     ...requestTimeoutMs !== void 0 ? { requestTimeoutMs } : {}
@@ -23679,7 +23580,6 @@ var Room = class {
   script;
   explicitScriptHost;
   mapLoader;
-  seedCacheKv;
   sockets;
   /** mudb wire codec: protocol envelope + netcode frames. */
   codec;
@@ -23721,6 +23621,8 @@ var Room = class {
   mapLoading;
   worldReady = false;
   snapshotRestored = false;
+  /** One-shot guard for the "proof without sessionSecret" diagnostic. */
+  guestWarningLogged = false;
   persistence;
   socketsStarted = false;
   perf = { minPing: 0, maxPing: 0, avgPing: 0, pingCount: 0 };
@@ -23732,6 +23634,10 @@ var Room = class {
   inboundIds = /* @__PURE__ */ new Map();
   /** Snapshot parked by `init()` until the seeded engine exists. */
   pendingEngineSnapshot = null;
+  /** Map identity stored with the parked snapshot (absent on legacy snapshots). */
+  pendingEngineMap;
+  /** Identity of the map the current engine was seeded from. */
+  seededMap;
   heartbeatBeats = 0;
   ticksRun = 0;
   lastTickError;
@@ -23759,7 +23665,6 @@ var Room = class {
     this.explicitScriptHost = options.scriptHost !== void 0;
     this.script = options.scriptHost ?? this.engine;
     this.mapBootstrap = options.map;
-    this.seedCacheKv = resolveMapSeedKv(env);
     this.mapLoader = options.loadMapSeed ?? ((bootstrap) => this.loadSeed(bootstrap));
     this.registryTtlSeconds = options.registryTtlSeconds ?? DEFAULT_SESSION_SLOT_TTL_SECONDS;
     const banCacheTtlMs = options.banCacheTtlMs ?? DEFAULT_BAN_CACHE_TTL_MS2;
@@ -23813,6 +23718,7 @@ var Room = class {
         this.tickValue = snapshot2.tick;
         this.frameSkip = snapshot2.frameSkip;
         this.pendingEngineSnapshot = snapshot2.engine;
+        this.pendingEngineMap = snapshot2.map;
         this.snapshotRestored = true;
       }
       try {
@@ -23937,11 +23843,30 @@ var Room = class {
     }
     await this.mapLoading;
   }
-  /** Apply a snapshot parked by `init()` exactly once (seeded or not). */
+  /**
+   * Apply a snapshot parked by `init()` exactly once.
+   *
+   * A snapshot describes the world of the map it was captured from. Restoring
+   * one that came from another map (or from a room that never had a map) would
+   * replace the freshly seeded entities with nothing, leaving terrain but no
+   * models — so it is dropped instead. Dropping it also resets the tick
+   * counters, which `init()` had adopted optimistically.
+   */
   applyPendingEngineSnapshot() {
     if (this.pendingEngineSnapshot === null) return;
-    this.engine.restore(this.pendingEngineSnapshot);
+    const pending = this.pendingEngineSnapshot;
+    const pendingMap = this.pendingEngineMap;
     this.pendingEngineSnapshot = null;
+    this.pendingEngineMap = void 0;
+    if (this.seededMap !== void 0) {
+      if (!snapshotMatchesMap(pendingMap, this.seededMap)) {
+        this.tickValue = 0;
+        this.frameSkip = 0;
+        clearServerNetState(this.net, 0);
+        return;
+      }
+    }
+    this.engine.restore(pending);
   }
   async loadWorld(bootstrap) {
     try {
@@ -23957,6 +23882,7 @@ var Room = class {
       const engine = factory({ worldSeed: seed });
       this.engine = engine;
       if (!this.explicitScriptHost) this.script = engine;
+      this.seededMap = { slug: bootstrap.slug, root: bootstrap.root, worldId: seed.mapId };
       this.applyPendingEngineSnapshot();
       this.worldReady = true;
       this.logger.log(`cajonzero: seeded room "${bootstrap.slug}" from "${seed.mapId}"`);
@@ -23968,8 +23894,6 @@ var Room = class {
   }
   loadSeed(bootstrap) {
     return loadWorldSeedFromHttp(bootstrap, {
-      ...this.seedCacheKv !== void 0 ? { kv: this.seedCacheKv } : {},
-      cacheTtlSeconds: bootstrap.cacheTtlSeconds ?? 0,
       ...bootstrap.maxDownloadBytes !== void 0 ? { maxDownloadBytes: bootstrap.maxDownloadBytes } : {},
       ...bootstrap.concurrency !== void 0 ? { concurrency: bootstrap.concurrency } : {},
       ...bootstrap.requestTimeoutMs !== void 0 ? { requestTimeoutMs: bootstrap.requestTimeoutMs } : {}
@@ -24044,6 +23968,13 @@ var Room = class {
         this.pendingIdentities.set(sessionId, identity2);
       }
     } else {
+      const proof = extractSessionProof(request.headers.get("sec-websocket-protocol"));
+      if (proof !== void 0 && !this.guestWarningLogged) {
+        this.guestWarningLogged = true;
+        this.logger.error(
+          "cajonzero: a session proof was supplied but no sessionSecret is configured; players join as guest. Pass serve({ sessionSecret: (env) => env.<SECRET> })."
+        );
+      }
       identity2 = guestIdentity(sessionId);
     }
     const ip = resolveClientIp(request);
@@ -24705,7 +24636,8 @@ var Room = class {
       tick: this.tickValue,
       frameSkip: this.frameSkip,
       engine: this.engine.capture(),
-      clients: [...this.connections.values()].map(toSnapshotClient)
+      clients: [...this.connections.values()].map(toSnapshotClient),
+      ...this.seededMap !== void 0 ? { map: { ...this.seededMap } } : {}
     });
   }
   /**
@@ -25078,6 +25010,65 @@ var PhysicsZoneIndex = class {
   }
 };
 
+// src/vendor/mudb/box-schema/voxel/blocks.ts
+function fillAndZero(x, count) {
+  x.length = 0;
+  for (let i = 0; i < count; ++i) {
+    x.push(0);
+  }
+}
+function unpackBlockIndex(blockInfo, outIndex) {
+  let maxId = 0;
+  for (let i = 0; i < blockInfo.ids.length; ++i) {
+    maxId = Math.max(blockInfo.ids[i], maxId);
+  }
+  fillAndZero(outIndex.fluid, maxId);
+  fillAndZero(outIndex.mass, maxId);
+  fillAndZero(outIndex.friction, maxId);
+  fillAndZero(outIndex.restitution, maxId);
+  fillAndZero(outIndex.texture, 6 * maxId);
+  fillAndZero(outIndex.emissive, maxId);
+  fillAndZero(outIndex.velocity, 3 * maxId);
+  outIndex.name.length = 0;
+  outIndex.valid.length = 0;
+  for (let i = 0; i < maxId; ++i) {
+    outIndex.name.push("");
+    outIndex.valid.push(false);
+  }
+  outIndex.fluidInfo.length = 0;
+  outIndex.id = {};
+  for (let i = 0; i < blockInfo.ids.length; ++i) {
+    const id = blockInfo.ids[i];
+    const name = blockInfo.names[i];
+    outIndex.id[name] = id;
+    outIndex.name[id] = name;
+    outIndex.valid[id] = true;
+    outIndex.emissive[id] = blockInfo.emissive[i];
+    outIndex.restitution[id] = blockInfo.restitution[i];
+    outIndex.friction[id] = blockInfo.friction[i];
+    for (let j = 0; j < 6; ++j) {
+      outIndex.texture[6 * id + j] = blockInfo.texture[6 * i + j] | blockInfo.animLength[6 * i + j] << 24;
+    }
+    for (let j = 0; j < 3; ++j) {
+      outIndex.velocity[3 * id + j] = blockInfo.velocity[3 * i + j];
+    }
+  }
+  if (!outIndex.isFluid) {
+    outIndex.isFluid = new Uint8Array(4095);
+  }
+  for (let i = 0; i < 4095; ++i) {
+    outIndex.isFluid[i] = 0;
+  }
+  outIndex.fluidInfo.push(0);
+  for (let i = 0; i < blockInfo.fluids.length; ++i) {
+    const { id, info, mass } = blockInfo.fluids[i];
+    outIndex.fluid[id] = i + 1;
+    outIndex.fluidInfo.push(info);
+    outIndex.mass[id] = mass;
+    outIndex.isFluid[id] = 1;
+  }
+}
+
 // src/vendor/mudb/box-schema/voxel/box-decode.ts
 function signDecode(x) {
   if (x & 1) {
@@ -25558,14 +25549,19 @@ function createEmptyVoxelHandles() {
     )
   };
 }
-function buildVoxelHandles(voxels) {
-  const blockIndex = createSolidBlockIndex();
+function buildVoxelHandles(voxels, blockInfo) {
+  const blockIndex = blockInfo === void 0 ? createSolidBlockIndex() : createBlockIndexFromInfo(blockInfo);
   const collision = VoxelCollisionSchema.clone(
     VoxelCollisionSchema.identity
   );
   intializeCollision(blockIndex, collision, voxels);
   return { blockIndex, collision };
 }
+function createBlockIndexFromInfo(blockInfo) {
+  const blockIndex = BlockIndexSchema.clone(BlockIndexSchema.identity);
+  unpackBlockIndex(blockInfo, blockIndex);
+  return blockIndex;
+}
 function countSolidVoxels(voxels) {
   const data = voxels.data;
   let count = 0;
@@ -25781,7 +25777,7 @@ function createPlayEngine(options = {}) {
     options.worldSeed.voxels.shape,
     options.worldSeed.voxels.chunkBlobs
   ) : null;
-  const { blockIndex, collision } = options.voxelHandles ?? (decodedVoxels ? buildVoxelHandles(decodedVoxels) : createEmptyVoxelHandles());
+  const { blockIndex, collision } = options.voxelHandles ?? (decodedVoxels ? buildVoxelHandles(decodedVoxels, options.worldSeed?.blockInfo) : createEmptyVoxelHandles());
   const zoneIndex = new PhysicsZoneIndex();
   let lastContact = ContactIndexSchema.alloc();
   const historyRing = /* @__PURE__ */ new Map();
@@ -26174,7 +26170,6 @@ var DEFAULT_CONFIG = {
   admin: { path: "/admin" },
   room: { tickRate: 64, emptyGraceMs: 48e4 },
   maps: {
-    cacheTtlSeconds: 86400,
     maxDownloadBytes: 32 * 1024 * 1024,
     concurrency: 8,
     requestTimeoutMs: 15e3
@@ -26233,13 +26228,6 @@ function resolveConfig(input) {
       )
     },
     maps: {
-      cacheTtlSeconds: integer(
-        maps.cacheTtlSeconds,
-        DEFAULT_CONFIG.maps.cacheTtlSeconds,
-        "maps.cacheTtlSeconds",
-        0,
-        31536e3
-      ),
       maxDownloadBytes: integer(
         maps.maxDownloadBytes,
         DEFAULT_CONFIG.maps.maxDownloadBytes,
@@ -26295,8 +26283,6 @@ function validationHook(code, status = 400) {
 
 // src/core/identity/account-routes.ts
 var SESSION_COOKIE_NAME = "cajonzero_session";
-var RATE_LIMIT_MAX_ATTEMPTS = 5;
-var RATE_LIMIT_WINDOW_SECONDS = 300;
 var USERNAME_PATTERN = /^[a-zA-Z][a-zA-Z0-9_]{2,31}$/;
 var MIN_PASSWORD_LENGTH = 10;
 var MAX_PASSWORD_LENGTH = 128;
@@ -26365,22 +26351,6 @@ function clientIp(request) {
   }
   return "unknown";
 }
-async function enforceAttempts(c, deps, attempts) {
-  let retryAfter = null;
-  for (const attempt of attempts) {
-    const state = await deps.ratelimits.increment(attempt.scope, attempt.key, {
-      windowSeconds: RATE_LIMIT_WINDOW_SECONDS
-    });
-    if (state.count > RATE_LIMIT_MAX_ATTEMPTS) {
-      const seconds = Math.max(1, Math.ceil((state.expiresAt - deps.now()) / 1e3));
-      retryAfter = retryAfter === null ? seconds : Math.max(retryAfter, seconds);
-    }
-  }
-  if (retryAfter !== null) {
-    c.header("Retry-After", String(retryAfter));
-    throw new HttpError(429, "rate_limited");
-  }
-}
 async function issueSession(c, deps, account, ip) {
   const minted = await mintSessionToken(
     {
@@ -26413,10 +26383,6 @@ function accountRoutes(deps) {
     const username = body.username;
     const password = body.password;
     const ip = clientIp(c.req.raw);
-    await enforceAttempts(c, deps, [
-      { scope: "register-ip", key: ip },
-      { scope: "register-account", key: username.toLowerCase() }
-    ]);
     const saltBytes = randomSalt();
     const passwordHash = await derivePassword(password, saltBytes);
     let account;
@@ -26441,11 +26407,6 @@ function accountRoutes(deps) {
     const username = body.username;
     const password = body.password;
     const ip = clientIp(c.req.raw);
-    const attempts = [{ scope: "login-ip", key: ip }];
-    if (username.length > 0) {
-      attempts.push({ scope: "login-account", key: username.toLowerCase() });
-    }
-    await enforceAttempts(c, deps, attempts);
     const account = username.length > 0 ? await deps.accounts.getByUsername(username) : void 0;
     if (account === void 0 || account.disabled) {
       await dummyVerify(password);
@@ -26612,12 +26573,12 @@ var STATE_CHANGING_METHODS = /* @__PURE__ */ new Set([
   "DELETE"
 ]);
 var ENCODER = new TextEncoder();
-function encode2(text) {
+function encode(text) {
   return ENCODER.encode(text);
 }
 async function adminTokenMatches(provided, expected) {
   const [a, b] = await Promise.all([hashToken(provided), hashToken(expected)]);
-  return timingSafeEqual(encode2(a), encode2(b));
+  return timingSafeEqual(encode(a), encode(b));
 }
 function readBearer(header) {
   if (header === null || header === void 0) return "";
@@ -26696,7 +26657,7 @@ function assertCsrf(c, allowedOrigins) {
   if (cookie === void 0 || header === void 0 || header === "") {
     throw new HttpError(403, "csrf");
   }
-  if (!timingSafeEqual(encode2(cookie), encode2(header))) {
+  if (!timingSafeEqual(encode(cookie), encode(header))) {
     throw new HttpError(403, "csrf");
   }
 }
@@ -26863,7 +26824,7 @@ function toPublicMap(entry) {
     ...entry.worldId !== void 0 ? { worldId: entry.worldId } : {}
   };
 }
-function mountMapRoutes(app, catalog, options = {}) {
+function mountMapRoutes(app, catalog) {
   app.get("/api/maps", (c) => {
     c.header("Cache-Control", "public, max-age=60");
     return c.json({
@@ -26879,30 +26840,10 @@ function mountMapRoutes(app, catalog, options = {}) {
     c.header("Cache-Control", "public, max-age=60");
     return c.json({ map: toPublicMap(entry) });
   });
-  app.get("/api/maps/:slug/seed", async (c) => {
-    const entry = findMap(catalog, c.req.param("slug"));
-    if (entry === void 0) {
-      return c.json({ error: "map_not_found" }, 404);
-    }
-    try {
-      const seed = await loadWorldSeedFromHttp(entry, {
-        kv: options.kv,
-        cacheTtlSeconds: options.cacheTtlSeconds,
-        concurrency: options.concurrency,
-        requestTimeoutMs: options.requestTimeoutMs,
-        fetch: options.fetch
-      });
-      c.header("Cache-Control", "public, max-age=300");
-      return c.json({ seed });
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      return c.json({ error: "map_seed_failed", message }, 502);
-    }
-  });
 }
 
 // src/version.ts
-var VERSION = "0.1.0";
+var VERSION = "0.1.1";
 
 // src/core/server/room-gateway.ts
 var CONTAINER_PATTERN3 = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
@@ -26975,10 +26916,8 @@ function writeMapBootstrap(url, entry, deps) {
   url.searchParams.set("cajonzeroMap", entry.slug);
   url.searchParams.set("cajonzeroRoot", entry.root);
   if (entry.worldId !== void 0) url.searchParams.set("cajonzeroWorld", entry.worldId);
-  if (entry.etag !== void 0) url.searchParams.set("cajonzeroEtag", entry.etag);
   if (entry.version !== void 0) url.searchParams.set("cajonzeroVersion", entry.version);
   const { maps, room } = deps.config;
-  url.searchParams.set("cajonzeroCacheTtl", String(maps.cacheTtlSeconds));
   url.searchParams.set("cajonzeroMaxBytes", String(maps.maxDownloadBytes));
   url.searchParams.set("cajonzeroConcurrency", String(maps.concurrency));
   url.searchParams.set("cajonzeroTimeout", String(maps.requestTimeoutMs));
@@ -27005,12 +26944,7 @@ function registerRoutes(app, deps) {
     })
   );
   mountRoomGateway(app, deps);
-  mountMapRoutes(app, deps.maps, {
-    kv: deps.mapSeedKv,
-    cacheTtlSeconds: deps.config.maps.cacheTtlSeconds,
-    concurrency: deps.config.maps.concurrency,
-    requestTimeoutMs: deps.config.maps.requestTimeoutMs
-  });
+  mountMapRoutes(app, deps.maps);
   const repos = deps.repos ?? (deps.store !== void 0 ? createRepos(deps.store, { now: deps.now }) : void 0);
   const getSession = deps.getSession ?? (repos !== void 0 ? createCookieSessionReader({
     accounts: repos.accounts,
@@ -27033,7 +26967,6 @@ function registerRoutes(app, deps) {
       now: deps.now,
       accounts: repos.accounts,
       sessions: repos.sessions,
-      ratelimits: repos.ratelimits,
       getSession,
       sessionSecret: deps.sessionSecret,
       environment: deps.environment,
@@ -27094,7 +27027,6 @@ function createApp(options = {}) {
     sessionSecret: options.sessionSecret,
     adminToken: options.adminToken,
     environment: options.environment,
-    mapSeedKv: options.mapSeedKv,
     rooms: options.rooms,
     settingDefaults: options.settingDefaults
   };
@@ -27189,7 +27121,6 @@ function buildApp(env, options) {
   const sessionSecret = resolveSessionSecret(env);
   const adminToken = resolveAdminToken(env);
   const environment = resolveEnvironment(env);
-  const mapSeedKv = resolveMapSeedKv(env);
   const rooms = resolveRooms(env);
   const settingDefaults = resolveSettingDefaults(env);
   return createApp({
@@ -27198,7 +27129,6 @@ function buildApp(env, options) {
     ...sessionSecret !== void 0 ? { sessionSecret } : {},
     ...adminToken !== void 0 ? { adminToken } : {},
     ...environment !== void 0 ? { environment } : {},
-    ...mapSeedKv !== void 0 ? { mapSeedKv } : {},
     ...rooms !== void 0 ? { rooms } : {},
     ...settingDefaults !== void 0 ? { settingDefaults } : {}
   });
@@ -27216,7 +27146,6 @@ function serve(options = {}) {
     sessionSecret: options.sessionSecret,
     adminToken: options.adminToken,
     environment: options.environment,
-    mapSeedKv: options.mapSeedKv,
     rooms: options.rooms,
     settings: options.settings
   });