room-kit 1.0.1 → 1.0.5

package/README.md

@@ -201,11 +201,12 @@ Runtime presence mode is configured in the `defineRoomType` options:
 
 `serveRoomType(socket, roomType, handlers, adapter?)` accepts:
 
-- `onAuth(socket)`: optional unless you type a non-`unknown` auth context. Return `false` to reject the socket before room initialization.
+- `onAuth(socket)`: optional. Return `false` to reject the socket before room initialization.
 - `onConnect(socket, auth)`: optional transport-connect hook attempted once when the socket handler is attached (after auth resolution).
 - `revalidateAuth(socket, auth)`: optional per-request auth validation hook; return `{ kind: "ok", auth? }` to continue or `{ kind: "reject" }` to deny.
 - `initState(joinRequest)`: initializes room server state on first join for a given room instance.
-- `admit(joinRequest, ctx)`: required admission gate; returns `roomId`, `memberId`, `memberProfile`, and `roomProfile`.
+- `admit(joinRequest, ctx)`: optional admission gate. Return only the fields you want to override. Missing `roomId`, `memberId`, `memberProfile`, and `roomProfile` values are filled in by the server.
+- `admit` is still validated: any returned `roomId` must match the join request room id, and any returned `roomProfile.roomId` must match the resolved room id.
 - `onJoin(memberProfile, ctx)`: called after a successful join.
 - `onLeave(memberProfile, ctx)`: called on leave and during socket disconnect cleanup for joined rooms when auth is available for cleanup.
 - `onDisconnect(socket, auth)`: optional transport-disconnect hook.

package/changelog.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## 1.0.5
+
+- Made `onAuth` optional in server configs.
+- Made `admit` optional and allowed it to return partial admission data.
+- Added runtime defaults for missing admission fields and validation for room identity.
+- Updated docs and tests for the new auth and admission behavior.
+
+## 1.0.4
+
+- Added `serveRoomType(...).cleanup()` as the explicit server-handle teardown API.
+- Added `JoinedRoom.listen({ events, presence })` for batched subscription setup.
+- Improved reconnect replay for joined rooms and transport state tracking.
+
+## 1.0.3
+
+- Hardened client and server event handling with payload validation and safe handler-name checks.
+- Added acknowledgement timeouts and listener error isolation on the client.
+- Added server-side request limits and safer wire-frame parsing.
+
+## 1.0.2
+
+- Hardened room-key comparison in the example server with timing-safe equality.
+- Tightened server join validation and static file handling.
+- Cleaned up the example server routing and path resolution.
+
+## 1.0.1
+
+- Updated package metadata for ESM publishing.
+- Cleaned up the README packaging docs.
+- Simplified the package and JSR metadata layout.
+
 ## 1.0.0
 
 - Initial release of `room-kit`.
@@ -10,4 +41,4 @@
 - Added reconnect replay for active stream subscriptions and room memberships.
 - Added Socket.IO client and server adapters for room-aware sends and membership mutation.
 - Added a JSR-ready package entrypoint via `jsr.json`.
-- Expanded the README with current client, server, and JSR examples.
+- Expanded the README with current client, server, and JSR examples.

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,gBAAgB,EAUhB,UAAU,EACV,cAAc,EAKjB,MAAM,SAAS,CAAC;AAsCjB;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,SAAS,cAAc,CAAC,GAAG,CAAC,EAC9D,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,KAAK,GACZ,UAAU,CAAC,KAAK,CAAC,CA6CnB"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAER,gBAAgB,EAUhB,UAAU,EACV,cAAc,EAMjB,MAAM,SAAS,CAAC;AAwCjB;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,SAAS,cAAc,CAAC,GAAG,CAAC,EAC9D,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,KAAK,GACZ,UAAU,CAAC,KAAK,CAAC,CA6CnB"}

package/dist/client.js

@@ -5,6 +5,7 @@ const CLIENT_EVENT = "room-kit:client-event";
 const SERVER_EVENT = "room-kit:server-event";
 const PRESENCE_EVENT = "room-kit:presence";
 const PRESENCE_QUERY_EVENT = "room-kit:presence-query";
+const DEFAULT_ACK_TIMEOUT_MS = 30_000;
 const clientRegistries = new WeakMap();
 /**
  * Binds a client socket to a room type and returns a typed room client.
@@ -95,18 +96,34 @@ function createJoinedRoom(socket, state) {
                 return undefined;
             }
             return (handler) => {
-                const handlers = state.eventListeners.get(key) ?? new Set();
-                handlers.add(handler);
-                state.eventListeners.set(key, handlers);
-                return () => {
-                    handlers.delete(handler);
-                    if (handlers.size === 0) {
-                        state.eventListeners.delete(key);
-                    }
-                };
+                return registerEventListener(state, key, handler);
             };
         },
     });
+    const listen = (options) => {
+        const cleanups = [];
+        if (options.events) {
+            for (const [key, handler] of Object.entries(options.events)) {
+                if (typeof handler !== "function") {
+                    continue;
+                }
+                cleanups.push(registerEventListener(state, key, handler));
+            }
+        }
+        if ("presence" in options && options.presence?.onChange) {
+            cleanups.push(registerPresenceListener(state, options.presence.onChange));
+        }
+        let cleaned = false;
+        return () => {
+            if (cleaned) {
+                return;
+            }
+            cleaned = true;
+            for (const cleanup of cleanups) {
+                cleanup();
+            }
+        };
+    };
     const base = {
         name: state.name,
         roomId: state.roomId,
@@ -115,6 +132,7 @@ function createJoinedRoom(socket, state) {
         rpc,
         emit,
         on,
+        listen,
         async leave() {
             await emitAck(socket, LEAVE_EVENT, {
                 roomType: state.name,
@@ -132,10 +150,7 @@ function createJoinedRoom(socket, state) {
                         return state.presenceCurrent;
                     },
                     onChange(handler) {
-                        state.presenceListeners.add(handler);
-                        return () => {
-                            state.presenceListeners.delete(handler);
-                        };
+                        return registerPresenceListener(state, handler);
                     },
                     count() {
                         return emitAck(socket, PRESENCE_QUERY_EVENT, {
@@ -158,6 +173,23 @@ function createJoinedRoom(socket, state) {
         },
     });
 }
+function registerEventListener(state, key, handler) {
+    const handlers = state.eventListeners.get(key) ?? new Set();
+    handlers.add(handler);
+    state.eventListeners.set(key, handlers);
+    return () => {
+        handlers.delete(handler);
+        if (handlers.size === 0) {
+            state.eventListeners.delete(key);
+        }
+    };
+}
+function registerPresenceListener(state, handler) {
+    state.presenceListeners.add(handler);
+    return () => {
+        state.presenceListeners.delete(handler);
+    };
+}
 function getClientRegistry(socket) {
     const existing = clientRegistries.get(socket);
     if (existing) {
@@ -184,6 +216,16 @@ function getClientRegistry(socket) {
 function installClientHandlers(socket, registry) {
     if (!registry.serverHandlerInstalled) {
         const onServerEvent = (frame) => {
+            if (!frame ||
+                typeof frame !== "object" ||
+                typeof frame.roomType !== "string" ||
+                typeof frame.roomId !== "string" ||
+                typeof frame.name !== "string" ||
+                !frame.meta ||
+                typeof frame.meta !== "object" ||
+                typeof frame.meta.sentAt !== "string") {
+                return;
+            }
             const state = registry.joinedRooms.get(makeJoinedRoomKey(frame.roomType, frame.roomId));
             if (!state) {
                 return;
@@ -197,7 +239,12 @@ function installClientHandlers(socket, registry) {
                 sentAt: new Date(frame.meta.sentAt),
             };
             for (const handler of handlers) {
-                handler(frame.payload, meta);
+                try {
+                    handler(frame.payload, meta);
+                }
+                catch {
+                    // Swallow per-listener errors to avoid breaking the event loop
+                }
             }
         };
         socket.on(SERVER_EVENT, onServerEvent);
@@ -205,6 +252,12 @@ function installClientHandlers(socket, registry) {
     }
     if (!registry.presenceHandlerInstalled) {
         const onPresence = (frame) => {
+            if (!frame ||
+                typeof frame !== "object" ||
+                typeof frame.roomType !== "string" ||
+                typeof frame.roomId !== "string") {
+                return;
+            }
             const state = registry.joinedRooms.get(makeJoinedRoomKey(frame.roomType, frame.roomId));
             if (!state) {
                 return;
@@ -214,7 +267,12 @@ function installClientHandlers(socket, registry) {
                 return;
             }
             for (const handler of state.presenceListeners) {
-                handler(state.presenceCurrent);
+                try {
+                    handler(state.presenceCurrent);
+                }
+                catch {
+                    // Swallow per-listener errors
+                }
             }
         };
         socket.on(PRESENCE_EVENT, onPresence);
@@ -292,7 +350,11 @@ function makeJoinedRoomKey(name, roomId) {
 }
 function emitAck(socket, eventName, payload) {
     return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            reject(new Error(`Acknowledgement timeout for '${eventName}'`));
+        }, DEFAULT_ACK_TIMEOUT_MS);
         socket.emit(eventName, payload, (result) => {
+            clearTimeout(timer);
             if (!result || typeof result !== "object") {
                 reject(new Error("Invalid acknowledgement payload"));
                 return;
@@ -311,7 +373,12 @@ function setConnectionState(registry, next) {
     }
     registry.connectionState = next;
     for (const listener of registry.connectionListeners) {
-        listener(next);
+        try {
+            listener(next);
+        }
+        catch {
+            // Swallow per-listener errors
+        }
     }
 }
 //# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAoBA,MAAM,UAAU,GAAG,eAAe,CAAC;AACnC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,SAAS,GAAG,cAAc,CAAC;AACjC,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AA4BvD,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAAoC,CAAC;AAEzE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAC5B,MAAwB,EACxB,IAAW;IAEX,OAAO;QACH,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,UAAU;YACV,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC3C,OAAO;gBACH,IAAI,OAAO;oBACP,OAAO,QAAQ,CAAC,eAAe,CAAC;gBACpC,CAAC;gBACD,QAAQ,CAAC,OAA+C;oBACpD,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBAC1C,OAAO,GAAG,EAAE;wBACR,QAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACjD,CAAC,CAAC;gBACN,CAAC;aACJ,CAAC;QACN,CAAC;QACD,IAAI,CAAC,OAA2B;YAC5B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAE3C,OAAO,OAAO,CAKX,MAAM,EAAE,UAAU,EAAE;gBACnB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,OAAO;aACV,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,MAAM,KAAK,GAA2B;oBAClC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,eAAe,EAAE,KAAK,CAAC,QAAQ;oBAC/B,WAAW,EAAE,OAAO;oBACpB,cAAc,EAAE,IAAI,GAAG,EAAE;oBACzB,iBAAiB,EAAE,IAAI,GAAG,EAAE;iBAC/B,CAAC;gBAEF,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC5E,OAAO,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;QACP,CAAC;KACJ,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CACrB,MAAwB,EACxB,KAA6B;IAE7B,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,EAAyB,EAAE;QAC7C,GAAG,CAAC,OAAO,EAAE,GAAG;YACZ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACrB,CAAC;YAED,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;gBAC1B,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE;oBAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI,EAAE,GAAG;oBACT,IAAI;iBACP,CAAC,CAAC;YACP,CAAC,CAAC;QACN,CAAC;KACJ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,EAAyB,EAAE;QAC9C,GAAG,CAAC,OAAO,EAAE,GAAG;YACZ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACrB,CAAC;YAED,OAAO,CAAC,OAAgB,EAAE,EAAE;gBACxB,OAAO,OAAO,CAAO,MAAM,EAAE,YAAY,EAAE;oBACvC,QAAQ,EAAE,KAAK,CAAC,IAAI;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI,EAAE,GAAG;oBACT,OAAO;iBACV,CAAC,CAAC;YACP,CAAC,CAAC;QACN,CAAC;KACJ,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,IAAI,KAAK,CAAC,EAA2B,EAAE;QAC9C,GAAG,CAAC,OAAO,EAAE,GAAG;YACZ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACrB,CAAC;YAED,OAAO,CAAC,OAA8D,EAAE,EAAE;gBACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;gBAC5D,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACtB,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACxC,OAAO,GAAG,EAAE;oBACR,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACzB,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;wBACtB,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACrC,CAAC;gBACL,CAAC,CAAC;YACN,CAAC,CAAC;QACN,CAAC;KACJ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG;QACT,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,GAAG;QACH,IAAI;QACJ,EAAE;QACF,KAAK,CAAC,KAAK;YACP,MAAM,OAAO,CAAO,MAAM,EAAE,WAAW,EAAE;gBACrC,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC3C,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7E,CAAC;KACJ,CAAC;IAEF,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE;QACnB,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ;YACrB,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;gBACrB,OAAO;oBACH,IAAI,OAAO;wBACP,OAAO,KAAK,CAAC,eAAqC,CAAC;oBACvD,CAAC;oBACD,QAAQ,CAAC,OAA+C;wBACpD,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBACrC,OAAO,GAAG,EAAE;4BACR,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;wBAC5C,CAAC,CAAC;oBACN,CAAC;oBACD,KAAK;wBACD,OAAO,OAAO,CAAS,MAAM,EAAE,oBAAoB,EAAE;4BACjD,QAAQ,EAAE,KAAK,CAAC,IAAI;4BACpB,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,IAAI,EAAE,OAAO;yBAChB,CAAC,CAAC;oBACP,CAAC;oBACD,IAAI,CAAC,QAA2B,EAAE;wBAC9B,OAAO,OAAO,CAAyB,MAAM,EAAE,oBAAoB,EAAE;4BACjE,QAAQ,EAAE,KAAK,CAAC,IAAI;4BACpB,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,IAAI,EAAE,MAAM;4BACZ,GAAG,KAAK;yBACX,CAAC,CAAC;oBACP,CAAC;iBACJ,CAAC;YACN,CAAC;YAED,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC9C,CAAC;KACJ,CAAsB,CAAC;AAC5B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAwB;IAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,QAAQ,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAmB;QAC5B,sBAAsB,EAAE,KAAK;QAC7B,wBAAwB,EAAE,KAAK;QAC/B,yBAAyB,EAAE,KAAK;QAChC,0BAA0B,EAAE,KAAK;QACjC,4BAA4B,EAAE,KAAK;QACnC,gCAAgC,EAAE,KAAK;QACvC,8BAA8B,EAAE,KAAK;QACrC,+BAA+B,EAAE,KAAK;QACtC,gBAAgB,EAAE,KAAK;QACvB,eAAe,EAAE,YAAY;QAC7B,mBAAmB,EAAE,IAAI,GAAG,EAAE;QAC9B,WAAW,EAAE,IAAI,GAAG,EAAE;KACzB,CAAC;IAEF,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAwB,EAAE,QAAwB;IAC7E,IAAI,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,CAAC,KAUtB,EAAE,EAAE;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,OAAO;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO;YACX,CAAC;YAED,MAAM,IAAI,GAAG;gBACT,GAAG,KAAK,CAAC,IAAI;gBACb,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;aACjB,CAAC;YAEvB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC7B,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACvC,QAAQ,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAC3C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,wBAAwB,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,CAAC,KAA8D,EAAE,EAAE;YAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,OAAO;YACX,CAAC;YAED,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,QAA4B,CAAC;YAC3D,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO;YACX,CAAC;YAED,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC5C,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACnC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QACtC,QAAQ,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,yBAAyB,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,GAAG,EAAE;YACnB,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CAAC;YACjC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC1C,KAAK,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChC,QAAQ,CAAC,yBAAyB,GAAG,IAAI,CAAC;IAC9C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,0BAA0B,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,GAAG,EAAE;YACtB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACtC,QAAQ,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,GAAG,EAAE;YACxB,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5F,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;QAC3C,QAAQ,CAAC,4BAA4B,GAAG,IAAI,CAAC;IACjD,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,gCAAgC,EAAE,CAAC;QAC7C,MAAM,kBAAkB,GAAG,GAAG,EAAE;YAC5B,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;QACnD,QAAQ,CAAC,gCAAgC,GAAG,IAAI,CAAC;IACrD,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,+BAA+B,EAAE,CAAC;QAC5C,MAAM,iBAAiB,GAAG,GAAG,EAAE;YAC3B,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;QACjD,QAAQ,CAAC,+BAA+B,GAAG,IAAI,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,8BAA8B,EAAE,CAAC;QAC3C,MAAM,gBAAgB,GAAG,GAAG,EAAE;YAC1B,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;QAC/C,QAAQ,CAAC,8BAA8B,GAAG,IAAI,CAAC;IACnD,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,MAAwB,EAAE,QAAwB;IAC/E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAKxB,MAAM,EAAE,UAAU,EAAE;gBACnB,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,OAAO,EAAE,KAAK,CAAC,WAAW;aAC7B,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YAC5B,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAChC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YACtC,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,QAAQ,CAAC;YAEvC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC;YACD,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACL,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,MAAc;IACnD,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAS,MAAwB,EAAE,SAAiB,EAAE,OAAgB;IAClF,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,MAAkE,EAAE,EAAE;YACnG,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBACrD,OAAO;YACX,CAAC;YAED,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACtB,OAAO;YACX,CAAC;YAED,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAwB,EAAE,IAA2B;IAC7E,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACpC,OAAO;IACX,CAAC;IAED,QAAQ,CAAC,eAAe,GAAG,IAAI,CAAC;IAChC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;AACL,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAqBA,MAAM,UAAU,GAAG,eAAe,CAAC;AACnC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,SAAS,GAAG,cAAc,CAAC;AACjC,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAEvD,MAAM,sBAAsB,GAAG,MAAM,CAAC;AA4BtC,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAAoC,CAAC;AAEzE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAC5B,MAAwB,EACxB,IAAW;IAEX,OAAO;QACH,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,UAAU;YACV,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC3C,OAAO;gBACH,IAAI,OAAO;oBACP,OAAO,QAAQ,CAAC,eAAe,CAAC;gBACpC,CAAC;gBACD,QAAQ,CAAC,OAA+C;oBACpD,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBAC1C,OAAO,GAAG,EAAE;wBACR,QAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACjD,CAAC,CAAC;gBACN,CAAC;aACJ,CAAC;QACN,CAAC;QACD,IAAI,CAAC,OAA2B;YAC5B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAE3C,OAAO,OAAO,CAKX,MAAM,EAAE,UAAU,EAAE;gBACnB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,OAAO;aACV,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,MAAM,KAAK,GAA2B;oBAClC,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,eAAe,EAAE,KAAK,CAAC,QAAQ;oBAC/B,WAAW,EAAE,OAAO;oBACpB,cAAc,EAAE,IAAI,GAAG,EAAE;oBACzB,iBAAiB,EAAE,IAAI,GAAG,EAAE;iBAC/B,CAAC;gBAEF,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC5E,OAAO,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;QACP,CAAC;KACJ,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CACrB,MAAwB,EACxB,KAA6B;IAE7B,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,EAAyB,EAAE;QAC7C,GAAG,CAAC,OAAO,EAAE,GAAG;YACZ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACrB,CAAC;YAED,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;gBAC1B,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE;oBAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI,EAAE,GAAG;oBACT,IAAI;iBACP,CAAC,CAAC;YACP,CAAC,CAAC;QACN,CAAC;KACJ,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,EAAyB,EAAE;QAC9C,GAAG,CAAC,OAAO,EAAE,GAAG;YACZ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACrB,CAAC;YAED,OAAO,CAAC,OAAgB,EAAE,EAAE;gBACxB,OAAO,OAAO,CAAO,MAAM,EAAE,YAAY,EAAE;oBACvC,QAAQ,EAAE,KAAK,CAAC,IAAI;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI,EAAE,GAAG;oBACT,OAAO;iBACV,CAAC,CAAC;YACP,CAAC,CAAC;QACN,CAAC;KACJ,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,IAAI,KAAK,CAAC,EAA2B,EAAE;QAC9C,GAAG,CAAC,OAAO,EAAE,GAAG;YACZ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACrB,CAAC;YAED,OAAO,CAAC,OAA8D,EAAE,EAAE;gBACtE,OAAO,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACtD,CAAC,CAAC;QACN,CAAC;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,CAAC,OAA6B,EAAgB,EAAE;QAC3D,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAEzD,EAAE,CAAC;gBACA,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;oBAChC,SAAS;gBACb,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9D,CAAC;QACL,CAAC;QAED,IAAI,UAAU,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,OAAO,GAAG,EAAE;YACR,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO;YACX,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC7B,OAAO,EAAE,CAAC;YACd,CAAC;QACL,CAAC,CAAC;IACN,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG;QACT,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,GAAG;QACH,IAAI;QACJ,EAAE;QACF,MAAM;QACN,KAAK,CAAC,KAAK;YACP,MAAM,OAAO,CAAO,MAAM,EAAE,WAAW,EAAE;gBACrC,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC3C,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7E,CAAC;KACJ,CAAC;IAEF,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE;QACnB,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ;YACrB,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;gBACrB,OAAO;oBACH,IAAI,OAAO;wBACP,OAAO,KAAK,CAAC,eAAqC,CAAC;oBACvD,CAAC;oBACD,QAAQ,CAAC,OAA+C;wBACpD,OAAO,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBACpD,CAAC;oBACD,KAAK;wBACD,OAAO,OAAO,CAAS,MAAM,EAAE,oBAAoB,EAAE;4BACjD,QAAQ,EAAE,KAAK,CAAC,IAAI;4BACpB,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,IAAI,EAAE,OAAO;yBAChB,CAAC,CAAC;oBACP,CAAC;oBACD,IAAI,CAAC,QAA2B,EAAE;wBAC9B,OAAO,OAAO,CAAyB,MAAM,EAAE,oBAAoB,EAAE;4BACjE,QAAQ,EAAE,KAAK,CAAC,IAAI;4BACpB,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,IAAI,EAAE,MAAM;4BACZ,GAAG,KAAK;yBACX,CAAC,CAAC;oBACP,CAAC;iBACJ,CAAC;YACN,CAAC;YAED,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC9C,CAAC;KACJ,CAAsB,CAAC;AAC5B,CAAC;AAED,SAAS,qBAAqB,CAC1B,KAA6B,EAC7B,GAAW,EACX,OAA8D;IAE9D,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;IAC5D,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtB,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACxC,OAAO,GAAG,EAAE;QACR,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;IACL,CAAC,CAAC;AACN,CAAC;AAED,SAAS,wBAAwB,CAC7B,KAA6B,EAC7B,OAA+C;IAE/C,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,GAAG,EAAE;QACR,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC;AACN,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAwB;IAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,QAAQ,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAmB;QAC5B,sBAAsB,EAAE,KAAK;QAC7B,wBAAwB,EAAE,KAAK;QAC/B,yBAAyB,EAAE,KAAK;QAChC,0BAA0B,EAAE,KAAK;QACjC,4BAA4B,EAAE,KAAK;QACnC,gCAAgC,EAAE,KAAK;QACvC,8BAA8B,EAAE,KAAK;QACrC,+BAA+B,EAAE,KAAK;QACtC,gBAAgB,EAAE,KAAK;QACvB,eAAe,EAAE,YAAY;QAC7B,mBAAmB,EAAE,IAAI,GAAG,EAAE;QAC9B,WAAW,EAAE,IAAI,GAAG,EAAE;KACzB,CAAC;IAEF,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAwB,EAAE,QAAwB;IAC7E,IAAI,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,CAAC,KAUtB,EAAE,EAAE;YACD,IACI,CAAC,KAAK;gBACN,OAAO,KAAK,KAAK,QAAQ;gBACzB,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAClC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAChC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC9B,CAAC,KAAK,CAAC,IAAI;gBACX,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,EACvC,CAAC;gBACC,OAAO;YACX,CAAC;YAED,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,OAAO;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO;YACX,CAAC;YAED,MAAM,IAAI,GAAG;gBACT,GAAG,KAAK,CAAC,IAAI;gBACb,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;aACjB,CAAC;YAEvB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACD,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACjC,CAAC;gBAAC,MAAM,CAAC;oBACL,+DAA+D;gBACnE,CAAC;YACL,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACvC,QAAQ,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAC3C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,wBAAwB,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,CAAC,KAA8D,EAAE,EAAE;YAClF,IACI,CAAC,KAAK;gBACN,OAAO,KAAK,KAAK,QAAQ;gBACzB,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAClC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAClC,CAAC;gBACC,OAAO;YACX,CAAC;YAED,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACxF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,OAAO;YACX,CAAC;YAED,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,QAA4B,CAAC;YAC3D,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO;YACX,CAAC;YAED,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC5C,IAAI,CAAC;oBACD,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBACnC,CAAC;gBAAC,MAAM,CAAC;oBACL,8BAA8B;gBAClC,CAAC;YACL,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QACtC,QAAQ,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAC7C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,yBAAyB,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,GAAG,EAAE;YACnB,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CAAC;YACjC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC1C,KAAK,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChC,QAAQ,CAAC,yBAAyB,GAAG,IAAI,CAAC;IAC9C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,0BAA0B,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,GAAG,EAAE;YACtB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACtC,QAAQ,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,GAAG,EAAE;YACxB,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAC5F,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;QAC3C,QAAQ,CAAC,4BAA4B,GAAG,IAAI,CAAC;IACjD,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,gCAAgC,EAAE,CAAC;QAC7C,MAAM,kBAAkB,GAAG,GAAG,EAAE;YAC5B,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;QACnD,QAAQ,CAAC,gCAAgC,GAAG,IAAI,CAAC;IACrD,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,+BAA+B,EAAE,CAAC;QAC5C,MAAM,iBAAiB,GAAG,GAAG,EAAE;YAC3B,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;QACjD,QAAQ,CAAC,+BAA+B,GAAG,IAAI,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,8BAA8B,EAAE,CAAC;QAC3C,MAAM,gBAAgB,GAAG,GAAG,EAAE;YAC1B,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;QAC/C,QAAQ,CAAC,8BAA8B,GAAG,IAAI,CAAC;IACnD,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,MAAwB,EAAE,QAAwB;IAC/E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAKxB,MAAM,EAAE,UAAU,EAAE;gBACnB,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,OAAO,EAAE,KAAK,CAAC,WAAW;aAC7B,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YAC5B,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAChC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YACtC,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,QAAQ,CAAC;YAEvC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC;YACD,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACL,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,MAAc;IACnD,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,OAAO,CAAS,MAAwB,EAAE,SAAiB,EAAE,OAAgB;IAClF,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,SAAS,GAAG,CAAC,CAAC,CAAC;QACpE,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAE3B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,MAAkE,EAAE,EAAE;YACnG,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBACrD,OAAO;YACX,CAAC;YAED,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACtB,OAAO;YACX,CAAC;YAED,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAwB,EAAE,IAA2B;IAC7E,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACpC,OAAO;IACX,CAAC;IAED,QAAQ,CAAC,eAAe,GAAG,IAAI,CAAC;IAChC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QAClD,IAAI,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACL,8BAA8B;QAClC,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -2,5 +2,5 @@ export { ClientSafeError } from "./types";
 export { createRoomClient } from "./client";
 export { defineRoomType } from "./room";
 export { serveRoomType } from "./server";
-export type { ClientConnectionState, ClientSocketLike, EventMetaFor, JoinRequest, JoinedRoom, MemberProfileFor, PresenceListQuery, PresenceFor, PresencePageFor, PresencePolicy, RoomMemberSnapshot, RoomClient, RoomDefinition, RoomEvents, RoomProfileFor, RoomRpc, RoomSchema, ServerStateFor, RoomServerAdapter, RoomServerBroadcastApi, RoomServerHandle, RoomServerContext, RoomServerHandlers, RoomSnapshot, ServerAdmission, ServerSocketLike, VisibleMemberFor, } from "./types";
+export type { ClientConnectionState, ClientSocketLike, EventMetaFor, JoinRequest, JoinedRoom, MemberProfileFor, PresenceListQuery, PresenceFor, PresencePageFor, PresencePolicy, RoomMemberSnapshot, RoomClient, RoomDefinition, RoomEvents, RoomProfileFor, RoomRpc, RoomSchema, ServerStateFor, RoomServerAdapter, RoomServerBroadcastApi, RoomServerHandle, RoomServerContext, RoomServerHandlers, RoomSnapshot, ServerAdmission, ServerAdmissionInput, ServerSocketLike, VisibleMemberFor, } from "./types";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,YAAY,EACR,qBAAqB,EACrB,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,UAAU,EACV,cAAc,EACd,OAAO,EACP,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,gBAAgB,GACnB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,YAAY,EACR,qBAAqB,EACrB,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,UAAU,EACV,cAAc,EACd,OAAO,EACP,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,GACnB,MAAM,SAAS,CAAC"}

package/dist/server.d.ts

@@ -2,13 +2,13 @@ import type { RoomDefinition, RoomServerAdapter, RoomServerHandle, RoomServerHan
 /**
  * Attaches room runtime handlers to a connected server socket.
  *
- * Returns a callable handle that unregisters all listeners for the bound
- * socket, and exposes room introspection helpers.
+ * Returns a handle that unregisters all listeners for the bound socket via
+ * `cleanup()`, and exposes room introspection helpers.
  *
  * @example
  * ```ts
  * io.on("connection", (socket) => {
- *   const stop = serveRoomType(socket, chatRoomType, {
+ *   const handle = serveRoomType(socket, chatRoomType, {
  *     onAuth: async () => ({ userId: socket.id }),
  *     admit: async (join, ctx) => ({
  *       roomId: join.roomId,
@@ -19,7 +19,7 @@ import type { RoomDefinition, RoomServerAdapter, RoomServerHandle, RoomServerHan
  *   });
  *
  *   // Later if needed:
- *   // stop();
+ *   // handle.cleanup();
  * });
  * ```
  */

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAUR,cAAc,EAEd,iBAAiB,EAEjB,gBAAgB,EAEhB,kBAAkB,EAElB,gBAAgB,EAInB,MAAM,SAAS,CAAC;AAoCjB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,aAAa,CAAC,KAAK,SAAS,cAAc,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,EAC5E,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,EAC1C,OAAO,CAAC,EAAE,iBAAiB,GAC5B,gBAAgB,CAAC,KAAK,CAAC,CAyVzB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAWR,cAAc,EAGd,iBAAiB,EAEjB,gBAAgB,EAEhB,kBAAkB,EAElB,gBAAgB,EAKnB,MAAM,SAAS,CAAC;AAmKjB;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,aAAa,CAAC,KAAK,SAAS,cAAc,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,EAC5E,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,EAC1C,OAAO,CAAC,EAAE,iBAAiB,GAC5B,gBAAgB,CAAC,KAAK,CAAC,CAsXzB"}

package/dist/server.js

@@ -6,17 +6,106 @@ const CLIENT_EVENT = "room-kit:client-event";
 const SERVER_EVENT = "room-kit:server-event";
 const PRESENCE_EVENT = "room-kit:presence";
 const PRESENCE_QUERY_EVENT = "room-kit:presence-query";
+function assertNonEmptyString(value, label) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new ClientSafeError(`${label} must be a non-empty string`);
+    }
+}
+function assertObject(value, label) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new ClientSafeError(`${label} must be an object`);
+    }
+}
+function assertArray(value, label) {
+    if (!Array.isArray(value)) {
+        throw new ClientSafeError(`${label} must be an array`);
+    }
+}
+/** Validates and narrows a join frame from the wire. */
+function validateJoinFrame(raw) {
+    assertObject(raw, "Join frame");
+    assertNonEmptyString(raw.roomType, "roomType");
+    assertObject(raw.payload, "payload");
+    return { roomType: raw.roomType, payload: raw.payload };
+}
+/** Validates and narrows a leave frame from the wire. */
+function validateLeaveFrame(raw) {
+    assertObject(raw, "Leave frame");
+    assertNonEmptyString(raw.roomType, "roomType");
+    assertNonEmptyString(raw.roomId, "roomId");
+    return { roomType: raw.roomType, roomId: raw.roomId };
+}
+/** Validates and narrows an RPC frame from the wire. */
+function validateRpcFrame(raw) {
+    assertObject(raw, "RPC frame");
+    assertNonEmptyString(raw.roomType, "roomType");
+    assertNonEmptyString(raw.roomId, "roomId");
+    assertNonEmptyString(raw.name, "name");
+    assertArray(raw.args, "args");
+    return { roomType: raw.roomType, roomId: raw.roomId, name: raw.name, args: raw.args };
+}
+/** Validates and narrows a client-event frame from the wire. */
+function validateClientEventFrame(raw) {
+    assertObject(raw, "Client-event frame");
+    assertNonEmptyString(raw.roomType, "roomType");
+    assertNonEmptyString(raw.roomId, "roomId");
+    assertNonEmptyString(raw.name, "name");
+    return { roomType: raw.roomType, roomId: raw.roomId, name: raw.name, payload: raw.payload };
+}
+/** Validates and narrows a presence-query frame from the wire. */
+function validatePresenceQueryFrame(raw) {
+    assertObject(raw, "Presence-query frame");
+    assertNonEmptyString(raw.roomType, "roomType");
+    assertNonEmptyString(raw.roomId, "roomId");
+    if (raw.kind !== "count" && raw.kind !== "list") {
+        throw new ClientSafeError("Presence query kind must be 'count' or 'list'");
+    }
+    const result = { roomType: raw.roomType, roomId: raw.roomId, kind: raw.kind };
+    if (raw.offset !== undefined) {
+        if (typeof raw.offset !== "number" || !Number.isFinite(raw.offset)) {
+            throw new ClientSafeError("offset must be a finite number");
+        }
+        result.offset = raw.offset;
+    }
+    if (raw.limit !== undefined) {
+        if (typeof raw.limit !== "number" || !Number.isFinite(raw.limit)) {
+            throw new ClientSafeError("limit must be a finite number");
+        }
+        result.limit = raw.limit;
+    }
+    return result;
+}
+const DANGEROUS_PROPERTY_NAMES = new Set([
+    "__proto__",
+    "constructor",
+    "prototype",
+    "toString",
+    "valueOf",
+    "hasOwnProperty",
+    "isPrototypeOf",
+    "propertyIsEnumerable",
+    "toLocaleString",
+]);
+function assertSafeHandlerName(name) {
+    if (DANGEROUS_PROPERTY_NAMES.has(name)) {
+        throw new ClientSafeError(`Disallowed handler name '${name}'`);
+    }
+}
+/** Maximum number of rooms that can exist within a single namespace. */
+const MAX_ROOMS_PER_NAMESPACE = 10_000;
+/** Maximum number of socket connections tracked per room. */
+const MAX_MEMBERS_PER_ROOM = 10_000;
 const namespaceStates = new WeakMap();
 /**
  * Attaches room runtime handlers to a connected server socket.
  *
- * Returns a callable handle that unregisters all listeners for the bound
- * socket, and exposes room introspection helpers.
+ * Returns a handle that unregisters all listeners for the bound socket via
+ * `cleanup()`, and exposes room introspection helpers.
  *
  * @example
  * ```ts
  * io.on("connection", (socket) => {
- *   const stop = serveRoomType(socket, chatRoomType, {
+ *   const handle = serveRoomType(socket, chatRoomType, {
  *     onAuth: async () => ({ userId: socket.id }),
  *     admit: async (join, ctx) => ({
  *       roomId: join.roomId,
@@ -27,22 +116,29 @@ const namespaceStates = new WeakMap();
  *   });
  *
  *   // Later if needed:
- *   // stop();
+ *   // handle.cleanup();
  * });
  * ```
  */
 export function serveRoomType(socket, _room, handlers, adapter) {
     const namespaceState = getNamespaceState(socket);
     const authCache = new WeakMap();
-    const onJoin = async (frame, ack) => {
+    const onJoin = async (raw, ack) => {
         try {
+            if (ack !== undefined && typeof ack !== "function") {
+                return;
+            }
+            const frame = validateJoinFrame(raw);
             assertMatchingRoomName(_room, frame.roomType);
             const requestedRoomId = extractRoomId(frame.payload);
             const roomCollection = getOrCreateRoomCollection(namespaceState, frame.roomType);
+            if (!roomCollection.has(requestedRoomId) && roomCollection.size >= MAX_ROOMS_PER_NAMESPACE) {
+                throw new ClientSafeError("Maximum room limit reached for this namespace");
+            }
             const existingRoomState = roomCollection.get(requestedRoomId);
+            const auth = await resolveSocketAuth(socket, handlers, authCache, true);
             const initialState = (existingRoomState?.serverState ??
                 await Promise.resolve(handlers.initState?.(frame.payload) ?? {}));
-            const auth = await resolveSocketAuth(socket, handlers, authCache, true);
             const provisional = createContext(socket, namespaceState, {
                 adapter,
                 name: frame.roomType,
@@ -53,8 +149,7 @@ export function serveRoomType(socket, _room, handlers, adapter) {
                 roomProfile: undefined,
                 serverState: initialState,
             });
-            const admission = await handlers.admit(frame.payload, provisional);
-            assertMatchingRoomIds(requestedRoomId, admission.roomId, admission.roomProfile.roomId);
+            const admission = await resolveAdmission(socket, handlers, requestedRoomId, frame.payload, provisional);
             const roomState = roomCollection.get(admission.roomId) ?? {
                 presence: _room.presence,
                 roomProfile: admission.roomProfile,
@@ -62,6 +157,9 @@ export function serveRoomType(socket, _room, handlers, adapter) {
                 membersBySocketId: new Map(),
                 socketIdsByMemberId: new Map(),
             };
+            if (!roomState.membersBySocketId.has(socket.id) && roomState.membersBySocketId.size >= MAX_MEMBERS_PER_ROOM) {
+                throw new ClientSafeError("Room is full");
+            }
             roomState.roomProfile = roomState.roomProfile ?? admission.roomProfile;
             roomState.serverState = roomState.serverState ?? provisional.serverState;
             roomState.membersBySocketId.set(socket.id, {
@@ -97,8 +195,12 @@ export function serveRoomType(socket, _room, handlers, adapter) {
             ack?.({ ok: false, error: toErrorMessage(error) });
         }
     };
-    const onLeave = async (payload, ack) => {
+    const onLeave = async (raw, ack) => {
         try {
+            if (ack !== undefined && typeof ack !== "function") {
+                return;
+            }
+            const payload = validateLeaveFrame(raw);
             assertMatchingRoomName(_room, payload.roomType);
             const stored = getStoredMembership(namespaceState, payload.roomType, payload.roomId, socket.id);
             if (!stored) {
@@ -125,9 +227,14 @@ export function serveRoomType(socket, _room, handlers, adapter) {
             ack?.({ ok: false, error: toErrorMessage(error) });
         }
     };
-    const onRpc = async (frame, ack) => {
+    const onRpc = async (raw, ack) => {
         try {
+            if (ack !== undefined && typeof ack !== "function") {
+                return;
+            }
+            const frame = validateRpcFrame(raw);
             assertMatchingRoomName(_room, frame.roomType);
+            assertSafeHandlerName(frame.name);
             if (!handlers.rpc || !Object.hasOwn(handlers.rpc, frame.name)) {
                 throw new ClientSafeError(`Unknown RPC '${frame.name}'`);
             }
@@ -150,6 +257,9 @@ export function serveRoomType(socket, _room, handlers, adapter) {
                 roomProfile: getRoomState(namespaceState, frame.roomType, frame.roomId).roomProfile,
                 serverState: getRoomState(namespaceState, frame.roomType, frame.roomId).serverState,
             });
+            if (frame.args.length > 64) {
+                throw new ClientSafeError("Too many RPC arguments");
+            }
             const result = await handler(...frame.args, ctx);
             ack?.({ ok: true, value: result });
         }
@@ -157,9 +267,14 @@ export function serveRoomType(socket, _room, handlers, adapter) {
             ack?.({ ok: false, error: toErrorMessage(error) });
         }
     };
-    const onClientEvent = async (frame, ack) => {
+    const onClientEvent = async (raw, ack) => {
         try {
+            if (ack !== undefined && typeof ack !== "function") {
+                return;
+            }
+            const frame = validateClientEventFrame(raw);
             assertMatchingRoomName(_room, frame.roomType);
+            assertSafeHandlerName(frame.name);
             const stored = getStoredMembership(namespaceState, frame.roomType, frame.roomId, socket.id);
             if (!stored) {
                 throw new ClientSafeError("Socket is not joined to that room");
@@ -194,8 +309,12 @@ export function serveRoomType(socket, _room, handlers, adapter) {
             ack?.({ ok: false, error: toErrorMessage(error) });
         }
     };
-    const onPresenceQuery = async (frame, ack) => {
+    const onPresenceQuery = async (raw, ack) => {
         try {
+            if (ack !== undefined && typeof ack !== "function") {
+                return;
+            }
+            const frame = validatePresenceQueryFrame(raw);
             assertMatchingRoomName(_room, frame.roomType);
             const stored = getStoredMembership(namespaceState, frame.roomType, frame.roomId, socket.id);
             if (!stored) {
@@ -297,7 +416,7 @@ export function serveRoomType(socket, _room, handlers, adapter) {
         })
             .catch(() => undefined);
     }
-    const stop = () => {
+    const cleanup = () => {
         socket.off(JOIN_EVENT, onJoin);
         socket.off(LEAVE_EVENT, onLeave);
         socket.off(RPC_EVENT, onRpc);
@@ -305,12 +424,13 @@ export function serveRoomType(socket, _room, handlers, adapter) {
         socket.off(PRESENCE_QUERY_EVENT, onPresenceQuery);
         socket.off("disconnect", onDisconnect);
     };
-    return Object.assign(stop, {
+    return {
+        cleanup,
         rooms: () => listRoomSnapshots(namespaceState, _room.name),
         room: (roomId) => getRoomSnapshot(namespaceState, _room.name, roomId),
         members: (roomId, query) => getPresenceMembersPage(namespaceState, _room.name, roomId, query),
         count: (roomId) => getPresenceCount(namespaceState, _room.name, roomId),
-    });
+    };
 }
 function createContext(socket, namespaceState, ctxState) {
     const emit = createEventEmitApi((eventName, payload) => {
@@ -353,11 +473,16 @@ async function resolveSocketAuth(socket, handlers, authCache, revalidate) {
     if (entry.pending) {
         return entry.pending;
     }
-    if (entry.value === undefined) {
+    if (!entry.hasValue) {
         const pending = Promise.resolve(handlers.onAuth?.(socket))
             .then((auth) => {
+            if (auth === false) {
+                authCache.delete(socket);
+                throw new ClientSafeError("Unauthorized");
+            }
             const current = authCache.get(socket) ?? {};
             current.value = auth;
+            current.hasValue = true;
             current.pending = undefined;
             authCache.set(socket, current);
             return auth;
@@ -386,6 +511,18 @@ async function resolveSocketAuth(socket, handlers, authCache, revalidate) {
     }
     handleRejectedAuth(authCache, socket, decision);
 }
+async function resolveAdmission(socket, handlers, joinRoomId, join, ctx) {
+    const admission = handlers.admit ? await Promise.resolve(handlers.admit(join, ctx)) : {};
+    const roomId = admission.roomId ?? joinRoomId;
+    const roomProfile = admission.roomProfile ?? { roomId };
+    assertMatchingRoomIds(joinRoomId, roomId, roomProfile.roomId);
+    return {
+        roomId,
+        memberId: admission.memberId ?? socket.id,
+        memberProfile: admission.memberProfile ?? {},
+        roomProfile,
+    };
+}
 function handleRejectedAuth(authCache, socket, decision) {
     authCache.delete(socket);
     throw new ClientSafeError(decision.message ?? "Unauthorized");
@@ -737,7 +874,11 @@ function extractRoomId(payload) {
     if (!payload || typeof payload !== "object" || typeof payload.roomId !== "string") {
         throw new ClientSafeError("Join request must include a string roomId");
     }
-    return payload.roomId;
+    const roomId = payload.roomId;
+    if (roomId.length === 0 || roomId.length > 256) {
+        throw new ClientSafeError("roomId must be between 1 and 256 characters");
+    }
+    return roomId;
 }
 function toErrorMessage(error) {
     return error instanceof ClientSafeError ? error.message : "An internal server error occurred.";