[Do not merge] Auth server by gonpombo8 · Pull Request #1316 · decentraland/js-sdk-toolchain

gonpombo8 · 2026-02-13T05:16:21Z

Summary

This PR introduces a new client/server architecture for network messaging, replacing the
previous peer-to-peer CRDT synchronization with a centralized authoritative server model.

Key Changes

New Client/Server Architecture

Authoritative Server: Introduced server-side message validation and broadcasting with
permission checks
Client Message Processing: Clients now receive validated messages from the
authoritative server instead of direct peer-to-peer communication
Network Entity Mapping: Added proper entity ID mapping between network messages and
local entities
Message Conversion: Implemented bidirectional conversion between regular CRDT messages
and network messages

Server-Side Features

Message Validation: Server validates all incoming messages before broadcasting to
prevent invalid state changes
Permission System: Basic permission framework for component synchronization
(foundation for owner/server/all sync modes)
Entity Management: Automatic creation and mapping of network entities when new
entities are introduced
Transform Parent Fixing: Server handles Unity-specific transform parent relationships
for proper hierarchical rendering

Client-Side Changes

Simplified CRDT Processing: Clients now only handle regular CRDT messages, with
network message complexity abstracted away
Server Communication: All network messages flow through the authoritative server (peer
ID: authorative-server)
State Synchronization: Initial state requests are handled by the server rather than
peer-to-peer requests

Message Flow

Before (P2P):
Client A ↔ Client B ↔ Client C

After (Client/Server):
Client A ↘
Server (validates & broadcasts)
Client B ↗ ↘ Client C

Chunking and Broadcasting

Efficient Chunking: Adopted proven chunking strategy from engineToCrdt() for
reliable message splitting
Size Limit Compliance: Proper handling of 12KB LiveKit message size limits with
automatic chunking
Batch Processing: Messages are efficiently batched and broadcast as chunks when needed

Technical Architecture

Server Processing Flow

Receive network message from client
Find or create local entity mapping
Validate permissions (owner/component sync rules)
Convert to regular CRDT message for local application
Broadcast validated network message to all other clients

Client Processing Flow

Receive network message from authoritative server
Map network entity to local entity (create if needed)
Convert network message to regular CRDT message
Apply to local engine state

Migration Impact

Backwards Compatible: Existing CRDT logic remains unchanged
Transport Layer: Network transport now routes through server validation
Component Sync: Foundation laid for granular component synchronization modes
Performance: Reduced peer-to-peer complexity and improved message validation

Test Plan

Server message validation and broadcasting
Client network message processing and entity mapping
Transform parent fixing for Unity compatibility
Message chunking with size limits
Initial state synchronization through server

github-actions · 2026-02-13T05:18:55Z

Test this pull request

The @dcl/sdk package can be tested in scenes by running

npm install "https://sdk-team-cdn.decentraland.org/@dcl/js-sdk-toolchain/branch/auth-server/dcl-sdk-7.26.1-32239900708.commit-5e19eb0.tgz"

The @dcl/js-runtime package can be tested in scenes by running

npm install "https://sdk-team-cdn.decentraland.org/@dcl/js-sdk-toolchain/branch/auth-server/@dcl/js-runtime/dcl-js-runtime-7.26.1-32239900708.commit-5e19eb0.tgz"

To test with npx init

export SDK_COMMANDS="https://sdk-team-cdn.decentraland.org/@dcl/js-sdk-toolchain/branch/auth-server/dcl-sdk-commands-7.26.1-32239900708.commit-5e19eb0.tgz"
npx $SDK_COMMANDS init

The /changerealm command to test test in-world

/changerealm https://sdk-team-cdn.decentraland.org/ipfs/auth-server-e2e

You can preview this build entering:
https://playground.decentraland.org/?sdk-branch=auth-server

cloudflare-workers-and-pages · 2026-02-13T05:18:58Z

Deploying js-sdk-toolchain with Cloudflare Pages

Latest commit:	`3c77d90`
Status:	✅ Deploy successful!
Preview URL:	https://027d7f87.js-sdk-toolchain.pages.dev
Branch Preview URL:	https://auth-server.js-sdk-toolchain.pages.dev

View logs

pick f9ee3fd go back to req_crt_statate cause unity takes more time to connect to livekit

…livekit

* feat: Add analytics to the storage command * fix: Use another segment keys

Remove checkRoomReady guard from RES_CRDT_STATE handler and RealmInfo.onChange server path — the existing checks (realmInfo truthiness, isConnectedSceneRoom) are sufficient. Also remove the unused createRoom factory function since Room is instantiated directly via new Room(...).

When engineToCrdt() returns no chunks, send an empty response so the requester receives RES_CRDT_STATE and stops retrying. Guard the receiver against processing empty payloads.

* feat: locomotion settings (#1389) * feat: locomotion settings (#1238) * set locomotion settings protocol branch and rebuilt * serialization tests * fix: update @dcl/protocol version * feat: add AudioAnalysis and AvatarLocomotionSettings components to playground-assets API * fix: export empty object in ReactEcs namespace to resolve documentation warning * fix: update snapshot files --------- Co-authored-by: Rocío Mena <rociocmena@gmail.com> * feat: add IA_MODIFIER input action support (#1390) Co-authored-by: Steven Williams <stevenwritescode@gmail.com> * fix: --no-client no longer breaks file-watch hot reload (#1391) * feat: add AudioAnalysis component (#1393) * feat: add AudioAnalysis component definition and tests Port the AudioAnalysis extended component from the experimental branch. The protocol already includes audio_analysis.proto on main — this adds the SDK-side extended component with readIntoView/tryReadIntoView helpers, createAudioAnalysis/createOrReplaceAudioAnalysis convenience methods, and serialization tests. * fix: update playground-assets API review file for AudioAnalysis Add AudioAnalysisComponentDefinitionExtended interface and AudioAnalysisView type to the API surface definition. * rebuild snapshots * rebuild * fix: ignoredDeprecations version * fix: identation * fix: regenerate playground-assets * fix: typescript version for tests --------- Co-authored-by: nearnshaw <earnshaw.nico@gmail.com> Co-authored-by: Nicolas Earnshaw <nearnshaw@decentraland.org> Co-authored-by: Gabriel Diaz <gabrieldiaz31@gmail.com> * build * Update packages/@dcl/playground-assets/etc/playground-assets.api.md Signed-off-by: Gabriel Díaz <git@subsme.slmail.me> * Update snapshots --------- Signed-off-by: Gabriel Díaz <git@subsme.slmail.me> Co-authored-by: Rocío Mena <rociocmena@gmail.com> Co-authored-by: Rocío <69587750+RocioCM@users.noreply.github.com> Co-authored-by: Steven Williams <stevenwritescode@gmail.com> Co-authored-by: Nicolas Echezarreta <nicoecheza@gmail.com> Co-authored-by: nearnshaw <earnshaw.nico@gmail.com> Co-authored-by: Nicolas Earnshaw <nearnshaw@decentraland.org> Co-authored-by: Gabriel Diaz <gabrieldiaz31@gmail.com> Co-authored-by: Gabriel Díaz <git@subsme.slmail.me>

chore: sync main into authserver

… into chore/sync-main-to-authserver

chore: sync main to authserver

…1497)

… into chore/sync-main-to-authserver

chore: sync main to authserver

… into chore/sync-main-to-authserver

chore: sync main to authserver

…torage.json corruption (#1545) * fix(sdk-commands): serialize local storage writes to prevent server-storage.json corruption The local preview/storage server persisted env/world/player state via an unguarded whole-file read-modify-write on server-storage.json. Concurrent upserts (a scene firing several set() calls on load, multiple tabs, or the storage CLI) interleaved on the event loop, causing lost updates and, with overlapping saves, byte-level corruption that the loader then discarded to defaults. - Run every load->mutate->save through a single in-process FIFO queue so writes apply in order and never race. - Make saveServerStorage atomic (write temp file, then rename) so a crash mid-write can never leave a truncated, unparseable file. - Replace the shared DEFAULT_STORAGE const with a createDefaultStorage() factory so default loads no longer alias (and leak into) each other. Adds runtime-env.spec.ts covering concurrent upserts, cross-bucket writes, atomic-write, and default isolation. * docs: note PR base is the integration branch (e.g. auth-server), not main

gonpombo8 changed the title ~~Auth server~~ [Do not merge] Auth server Feb 13, 2026

gonpombo8 added do-not-merge do not merge labels Feb 13, 2026

gonpombo8 mentioned this pull request Feb 13, 2026

Feat: authorative server #1168

Closed

5 tasks

nicoecheza force-pushed the auth-server branch 2 times, most recently from 111fd7e to ddc8da1 Compare April 23, 2026 12:48

nicoecheza force-pushed the auth-server branch 3 times, most recently from 692d570 to 63ddb3f Compare May 4, 2026 13:13

nicoecheza force-pushed the auth-server branch from 1828100 to 2afa13b Compare May 19, 2026 15:17

gonpombo8 added 18 commits June 25, 2026 16:59

wip

8a0180b

feat: auth server arch

fb177a1

update snapshots

e76d738

pick f9ee3fd go back to req_crt_statate cause unity takes more time to connect to livekit

fix test

f94ac23

go back to req_crt_statate cause unity takes more time to connect to …

c82cc82

…livekit

add server side pre-validations when recieving crdt messages

fde348b

fix tests

97ca00e

add tests

3b0f1f3

add authorative crdt messages

d391769

add custom events with proper schema definitions

26b0c1e

replace eventBuswith room

a664a96

fix tests

a60ba86

remove inspector stashed

963f1af

fix linter

dc80129

fix misspelling authoritative

76c7c26

remove eventBus references

ec8f675

create new messages types to avoid filter from unity

7bd2f86

fix invalid messages

aef3609

gonpombo8 and others added 13 commits June 25, 2026 17:00

fix logs in auth-server (#1320)

ffa88e5

add server-logs command to package.json

aef26d6

feat: Add analytics to the storage command (#1325)

6d4f676

* feat: Add analytics to the storage command * fix: Use another segment keys

Fix empty CRDT state response causing infinite retries (#1342)

27bdacf

When engineToCrdt() returns no chunks, send an empty response so the requester receives RES_CRDT_STATE and stops retrying. Guard the receiver against processing empty payloads.

remove log

2dc1e88

Regenerate CRDT snapshots after merge

e45c3c9

feat: support --world and --position for server logs

cad0d72

update snapshots

40084b0

update snapshots

543624c

fix: snapshots

24aee1d

fix(ecs): don't seed lastSentData from incoming CRDT updates

be9f20d

nicoecheza force-pushed the auth-server branch 2 times, most recently from dd448d3 to a770a7e Compare June 25, 2026 20:20

update snapshots

1a6c780

nicoecheza force-pushed the auth-server branch from a770a7e to 1a6c780 Compare June 25, 2026 20:47

pravusjif added 5 commits July 2, 2026 00:19

merged main + rebuilt snapshots

f68af6e

Merge pull request #1435 from decentraland/chore/sync-main-to-authserver

697ce9e

chore: sync main into authserver

Merge branch 'main' of https://github.com/decentraland/js-sdk-toolchain…

9aee22d

… into chore/sync-main-to-authserver

Merge pull request #1488 from decentraland/chore/sync-main-to-authserver

d270434

chore: sync main to authserver

feat: storage cache, unchanged-write skipping, memoized storage URL (#…

5ffe873

…1497)

nicoecheza mentioned this pull request Jul 30, 2026

Preview: Multiplayer Server crashes — isolated-vm has no Electron-ABI native build (spawned on Electron runtime instead of real Node) decentraland/creator-hub#1442

Open

pravusjif and others added 7 commits August 12, 2026 21:22

Merge branch 'main' of https://github.com/decentraland/js-sdk-toolchain…

37a7755

… into chore/sync-main-to-authserver

fixed merge problems

adf872c

Merge branch 'main' of https://github.com/decentraland/js-sdk-toolchain…

26ad1a9

… into chore/sync-main-to-authserver

Merge pull request #1538 from decentraland/chore/sync-main-to-authserver

96e9a29

chore: sync main to authserver

Merge branch 'main' of https://github.com/decentraland/js-sdk-toolchain…

d83690c

… into chore/sync-main-to-authserver

Merge pull request #1548 from decentraland/chore/sync-main-to-authserver

0b97733

chore: sync main to authserver

Navigation Menu

Uh oh!

[Do not merge] Auth server - #1316

[Do not merge] Auth server#1316
gonpombo8 wants to merge 58 commits into
mainfrom
auth-server

gonpombo8 commented Feb 13, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Feb 13, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Feb 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Uh oh!

Conversation

gonpombo8 commented Feb 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Key Changes

New Client/Server Architecture

Server-Side Features

Client-Side Changes

Message Flow

Chunking and Broadcasting

Technical Architecture

Server Processing Flow

Client Processing Flow

Migration Impact

Test Plan

Uh oh!

github-actions Bot commented Feb 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test this pull request

Uh oh!

cloudflare-workers-and-pages Bot commented Feb 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying js-sdk-toolchain with Cloudflare Pages

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

gonpombo8 commented Feb 13, 2026 •

edited

Loading

github-actions Bot commented Feb 13, 2026 •

edited

Loading

cloudflare-workers-and-pages Bot commented Feb 13, 2026 •

edited

Loading