extract realm specific handling into #realm

package.json

···
   "type": "module",
   "imports": {
     "#common/*": "./src/common/*",
+    "#realm/*": "./src/realm/*",
     "#client/*": "./src/client/*",
     "#server/*": "./src/server/*",
     "#skypod/*": "./src/skypod/*"

src/client/components/messenger.tsx

···
 import {useSignal} from '@preact/signals'
 import {useCallback} from 'preact/hooks'
 
-import {useRealmIdentity} from '#client/realm/context-identity'
 import {useDatabase} from '#client/root/context-database'
 import {useSkypod} from '#client/skypod/context'
+import {useRealmIdentity} from '#realm/client/context-identity'
 
 export const Messenger: preact.FunctionComponent = () => {
   const {useDbSignal} = useDatabase()

src/client/components/peer-list.tsx

···
 import {useSignal, useSignalEffect} from '@preact/signals'
 
-import {useRealmConnection} from '#client/realm/context-connection'
-import {PeerState} from '#client/realm/types'
-import {IdentID} from '#common/protocol'
+import {useRealmConnection} from '#realm/client/context-connection'
+import {PeerState} from '#realm/client/types'
+import {IdentID} from '#realm/protocol/index'
 
 export const PeerList: preact.FunctionComponent = () => {
   const connection = useRealmConnection()

src/client/page-app.tsx

···
-import {RealmConnectionManager} from '#client/realm/cmpnt-connection-manager'
+import {DatabaseProvider} from '#client/root/context-database'
+import {SkypodProvider} from '#client/skypod/context'
+import {RealmConnectionManager} from '#realm/client/cmpnt-connection-manager'
 import {
   RealmConnectionFallbackProps,
   RealmConnectionProvider,
-} from '#client/realm/context-connection'
-import {RealmIdentityFallbackProps, RealmIdentityProvider} from '#client/realm/context-identity'
-import {DatabaseProvider} from '#client/root/context-database'
-import {SkypodProvider} from '#client/skypod/context'
+} from '#realm/client/context-connection'
+import {RealmIdentityFallbackProps, RealmIdentityProvider} from '#realm/client/context-identity'
 
 import {DebugNuke} from './components/debug-nuke'
 import {Messenger} from './components/messenger'

src/client/realm/cmpnt-connection-manager.tsx src/realm/client/cmpnt-connection-manager.tsx

···
 
 import {generateSignableJwt} from '#common/crypto/jwks'
 import {jwtSchema} from '#common/crypto/jwts'
-import {RealmBrand} from '#common/protocol'
+import {RealmBrand} from '#realm/protocol/index'
 
 import {useRealmConnection} from './context-connection'
 import {useRealmIdentity} from './context-identity'

src/client/realm/context-identity.tsx src/realm/client/context-identity.tsx

···
 import {useDatabase} from '#client/root/context-database'
 import {generateSigningJwkPair} from '#common/crypto/jwks'
 import {normalizeProtocolError, ProtocolError} from '#common/errors'
-import {IdentBrand, IdentID} from '#common/protocol'
-import {ClockState, ClockStorage, LogicalClock} from '#common/protocol/logical-clock'
+import {IdentBrand, IdentID} from '#realm/protocol/index'
+import {ClockState, ClockStorage, LogicalClock} from '#realm/protocol/logical-clock'
 
 import {RealmIdentity} from './service-identity'
 

src/client/realm/service-connection-peer.ts src/realm/client/service-connection-peer.ts

···
 
 import {BlockingQueue} from '#common/async/blocking-queue'
 import {sleep} from '#common/async/sleep'
-import * as protocol from '#common/protocol'
-import {IdentID} from '#common/protocol'
-import {DeviceCaps, DeviceInfo} from '#common/protocol/device'
+import {DeviceCaps, DeviceInfo} from '#realm/protocol/device'
+import * as protocol from '#realm/protocol/index'
+import {IdentID} from '#realm/protocol/index'
 
 import {RealmSyncManager} from './service-connection-sync'
 

src/client/realm/service-connection-sync.ts src/realm/client/service-connection-sync.ts

···
 import {Database, StoredAction} from '#client/root/service-database'
-import {IdentID} from '#common/protocol'
-import {LCTimestamp, LogicalClock} from '#common/protocol/logical-clock'
+import {IdentID} from '#realm/protocol/index'
+import {LCTimestamp, LogicalClock} from '#realm/protocol/logical-clock'
 import {DeviceScanner} from './service-device'
 
 export class RealmSyncManager {

src/client/realm/service-connection.ts src/realm/client/service-connection.ts

···
 import {generateSignableJwt, jwkImport} from '#common/crypto/jwks'
 import {jwtPayload, verifyJwtToken} from '#common/crypto/jwts'
 import {normalizeError, normalizeProtocolError, ProtocolError} from '#common/errors'
-import * as protocol from '#common/protocol'
-import {IdentID, RealmID} from '#common/protocol'
-import {LogicalClock} from '#common/protocol/logical-clock'
 import {streamSocketJson, takeSocketJson} from '#common/socket'
+
+import {IdentID, RealmID} from '#realm/protocol/brands'
+import * as protocol from '#realm/protocol/index'
+import {LogicalClock} from '#realm/protocol/logical-clock'
 
 import {Database} from '#client/root/service-database'
 

src/client/realm/service-device.ts src/realm/client/service-device.ts

···
-import {DeviceCaps, DeviceInfo} from '#common/protocol/device'
+import {DeviceCaps, DeviceInfo} from '#realm/protocol/device'
 
 export class DeviceScanner {
   #caps: DeviceCaps

src/client/realm/service-identity.ts src/realm/client/service-identity.ts

···
 import {JWK, jwkExport} from '#common/crypto/jwks'
-import {IdentID} from '#common/protocol'
+import {IdentID} from '#realm/protocol/index'
 
 import {Signable} from './types'
 

src/client/realm/types.ts src/realm/client/types.ts

···
-import {IdentID, RealmID} from '#common/protocol'
+import {IdentID, RealmID} from '#realm/protocol/index'
 
 /** identity info for connecting to a realm */
 export interface ConnectionIdentity {

src/client/root/service-database.ts

···
 import Dexie, {Collection, IndexableType, type Table} from 'dexie'
 
 import {JWK} from '#common/crypto/jwks'
-import {IdentID, RealmID} from '#common/protocol'
-import {LCTimestamp, LogicalClock} from '#common/protocol/logical-clock'
+import {IdentID, RealmID} from '#realm/protocol/index'
+import {LCTimestamp, LogicalClock} from '#realm/protocol/logical-clock'
 import {Feed, FeedEntry, Lock} from '#skypod/schema'
 
 export interface LocalIdentity {

src/client/skypod/context.tsx

···
 import {useContext, useEffect, useRef} from 'preact/hooks'
 import {z} from 'zod/v4'
 
-import {IdentID} from '#common/protocol'
+import {IdentID} from '#realm/protocol/index'
 import {Action, ActionMap, ActionOpts, actionSchema} from '#skypod/actions'
 import {feedSchema} from '#skypod/schema'
 
-import {useRealmConnection} from '#client/realm/context-connection'
-import {useRealmIdentity} from '#client/realm/context-identity'
 import {useDatabase} from '#client/root/context-database'
+import {useRealmConnection} from '#realm/client/context-connection'
+import {useRealmIdentity} from '#realm/client/context-identity'
 
-import {LogicalClock} from '#common/protocol/logical-clock'
+import {LogicalClock} from '#realm/protocol/logical-clock'
 import FeedFetchWorker from './feed-fetch.worker?worker'
 
 export type MiddlewareFn = (

src/client/skypod/feed-fetch.worker.ts

···
 
 import {Database} from '#client/root/service-database'
 import {normalizeProtocolError} from '#common/errors'
-import {IdentBrand, IdentID} from '#common/protocol'
-import {LCTimestamp, LogicalClock} from '#common/protocol/logical-clock'
+import {IdentBrand, IdentID} from '#realm/protocol/index'
+import {LCTimestamp, LogicalClock} from '#realm/protocol/logical-clock'
 
 const msgStartSchema = z.object({
   msg: z.literal('start'),

src/cmd/register-ident.ts

···
 #!/usr/bin/env node
 
 import {generateSignableJwt, generateSigningJwkPair, jwkExport} from '#common/crypto/jwks'
-import {IdentBrand, RealmBrand} from '#common/protocol'
+import {IdentBrand, RealmBrand} from '#realm/protocol/index'
 
 async function generateRegistrationJWT(realm?: string) {
   const keypair = await generateSigningJwkPair()

src/cmd/server.ts

···
 import {fileURLToPath} from 'url'
 import {parseArgs} from 'util'
 
+import {ensureRealmMap} from '#realm/server/state'
 import {buildServer} from '#server/index'
-import {ensureRealmMap} from '#server/routes-socket/state'
 
 const __filename = fileURLToPath(import.meta.url)
 const __dirname = dirname(__filename)

src/common/protocol.ts

···
 import {z} from 'zod/v4'
-import {ProtocolError} from './errors'
-import {errorMessageSchema} from './protocol/schema'
-
-export * from './protocol/brands'
-export * from './protocol/messages'
 
 /** a zod transformer for parsing json */
 export const parseJson = z.transform<string, unknown>((input, ctx) => {
···
     return z.NEVER
   }
 })
-
-export function makeError(
-  error: ProtocolError,
-  detail: string,
-  seq?: number,
-): z.infer<typeof errorMessageSchema> {
-  return {
-    typ: 'err',
-    msg: error.message,
-    seq,
-    dat: {
-      code: error.status,
-      detail,
-    },
-  }
-}

src/common/protocol/logical-clock.ts src/realm/protocol/logical-clock.ts

···
-import {IdentBrand, IdentID} from '#common/protocol/brands'
+import {IdentBrand, IdentID} from '#realm/protocol/brands'
 import {z} from 'zod/v4'
 
 export interface ClockStorage {

src/realm/protocol/index.ts

···
+import {z} from 'zod/v4'
+
+import {ProtocolError} from '#common/errors'
+
+import {errorMessageSchema} from './schema'
+
+export * from './brands'
+export * from './messages'
+
+export function makeError(
+  error: ProtocolError,
+  detail: string,
+  seq?: number,
+): z.infer<typeof errorMessageSchema> {
+  return {
+    typ: 'err',
+    msg: error.message,
+    seq,
+    dat: {
+      code: error.status,
+      detail,
+    },
+  }
+}

src/server/index.ts

···
 
 import {WebSocketServer} from 'ws'
 
+import {socketHandler} from '#realm/server/handler'
 import {apiRouter} from './routes-api/middleware'
 import {notFoundHandler} from './routes-error'
-import {socketHandler} from './routes-socket/handler'
 import {makeSpaMiddleware, makeStaticMiddleware} from './routes-static'
 
 /**

src/server/realm-storage.ts src/realm/realm-storage.ts

···
 import {z} from 'zod/v4'
 
 import {jwkExport, jwkImport, type JWK} from '#common/crypto/jwks'
-import {IdentBrand, IdentID, RealmBrand, RealmID} from '#common/protocol'
-import {LCTimestamp, LogicalClock} from '#common/protocol/logical-clock'
-import {actionMessageSchema} from '#common/protocol/schema'
 import {StrictMap} from '#common/strict-map'
+import {IdentBrand, IdentID, RealmBrand, RealmID} from '#realm/protocol/index'
+import {LCTimestamp, LogicalClock} from '#realm/protocol/logical-clock'
+import {actionMessageSchema} from '#realm/protocol/schema'
 
 export type IncomingAction = z.infer<typeof actionMessageSchema>
 export type StoredAction = z.infer<typeof storedActionSchema>

src/server/routes-socket/handler-preauth.ts src/realm/server/handler-preauth.ts

···
 import {JWK, jwkExport, jwkImport} from '#common/crypto/jwks'
 import {jwtPayload, jwtSchema, JWTToken, verifyJwtToken} from '#common/crypto/jwts'
 import {normalizeError, ProtocolError} from '#common/errors'
+import {takeSocket} from '#common/socket'
 import {
   IdentBrand,
   IdentID,
···
   PreauthResponse,
   RealmBrand,
   RealmID,
-} from '#common/protocol'
-import {takeSocket} from '#common/socket'
+} from '#realm/protocol/index'
 
 import * as realms from './state'
 

src/server/routes-socket/handler-realm.ts src/realm/server/handler-realm.ts

···
 
 import {jwkExport} from '#common/crypto/jwks'
 import {normalizeProtocolError, ProtocolError} from '#common/errors'
-import * as protocol from '#common/protocol'
-import {actionMessageSchema} from '#common/protocol/schema'
+import {parseJson} from '#common/protocol'
 import {streamSocket} from '#common/socket'
 
-import * as realm from '#server/routes-socket/state'
+import * as protocol from '#realm/protocol/index'
+import {actionMessageSchema} from '#realm/protocol/schema'
+
+import * as realm from '#realm/server/state'
 
 // what can the server handle?
 const incomingMessageSchema = z.union([
···
   realmBroadcast(auth, await buildRtcPeerJoined(auth))
 
   try {
-    const incomingParser = protocol.parseJson.pipe(incomingMessageSchema)
+    const incomingParser = parseJson.pipe(incomingMessageSchema)
     for await (const msg of streamSocket(ws, {signal})) {
       try {
         const data = await incomingParser.parseAsync(msg)

src/server/routes-socket/state.ts src/realm/server/state.ts

···
 import WebSocket from 'isomorphic-ws'
 
-import {IdentID, RealmID} from '#common/protocol'
-import {DeviceCaps, DeviceInfo} from '#common/protocol/device'
 import {StrictMap} from '#common/strict-map'
+import {DeviceCaps, DeviceInfo} from '#realm/protocol/device'
+import {IdentID, RealmID} from '#realm/protocol/index'
 
-import {RealmStorage} from '#server/realm-storage'
+import {RealmStorage} from '#realm/realm-storage'
 
 /** An authenticated identity; only handed out in response to successful authentication. */
 export interface AuthenticatedIdentity {

src/skypod/actions-feed.ts

···
-import {makeActionSchema} from '#common/protocol/schema'
+import {makeActionSchema} from '#realm/protocol/schema'
 import {z} from 'zod/v4'
 
 import {feedSchema, lockSchema} from './schema'

src/skypod/actions-feedentry.ts

···
-import {makeActionSchema} from '#common/protocol/schema'
+import {makeActionSchema} from '#realm/protocol/schema'
 import {z} from 'zod/v4'
 
 export const patchActionSchema = makeActionSchema(

src/skypod/actions.ts

···
-import {LCTimestamp} from '#common/protocol/logical-clock'
-import {actionOptionsSchema} from '#common/protocol/schema'
+import {LCTimestamp} from '#realm/protocol/logical-clock'
+import {actionOptionsSchema} from '#realm/protocol/schema'
 import {z} from 'zod/v4'
 
 import {feedActionSchemas} from './actions-feed'

src/skypod/schema.ts

···
-import {IdentBrand} from '#common/protocol/brands'
-import {LogicalClock} from '#common/protocol/logical-clock'
+import {IdentBrand} from '#realm/protocol/brands'
+import {LogicalClock} from '#realm/protocol/logical-clock'
 import {z} from 'zod/v4'
 
 // lock schema for distributed work coordination

tsconfig.json

···
     "baseUrl": ".",
     "paths": {
       "#common/*": ["./src/common/*"],
+      "#realm/*": ["./src/realm/*"],
       "#client/*": ["./src/client/*"],
       "#server/*": ["./src/server/*"],
       "#skypod/*": ["./src/skypod/*"]