Realtime

Sessions

Each Running product maps to one managed Woven session. Woven Host provisions the namespace and session, applies its CCU allocation, and returns the exact assigned scope in a private connection descriptor.

The descriptor defines the session boundary

Endpoint and TLS

Native clients use endpoint and caPem or an application-provided trusted root store. The Online browser path uses webTransport.url and the optional lowercase-hex webTransport.certificateSha256 pin. Browser JavaScript cannot install caPem as an arbitrary trust root.

Managed scope

namespaceId and sessionId identify the one session authorized by this descriptor. The token is limited to that managed product.

Spaces

The Lite connection descriptor returns spaces 1 and 2, both at epoch 1, with a Logical coordinate frame and BroadcastAll routing.

Channels

Both spaces expose exactly channels 1 and 4: reliable ordered delivery on channel 1 (ReliableOrdered) and unreliable sequenced delivery on channel 4 (UnreliableSequenced). Both are Ephemeral with a 64 KiB payload ceiling and generic opaque payloads. Channels 2 and 3 remain disallowed. Channel policy is server-controlled and cannot be overridden by a client. Host refuses to reveal a descriptor if the live node does not match this exact contract.

Admission joins the managed session

Connect with the descriptor token using explicit Bearer authentication. Before subscribing or publishing, call request_admission or admit_with_cancellation in Rust, or requestAdmission or admitWithCancellation in the TypeScript browser client. An admitted result atomically consumes one CCU slot and joins the session. The ordinary session join path is rejected for managed sessions.

Admitted

The connection is already a session member and may proceed to subscribe.

Queued

The connection owns a queue ticket. Use queue_heartbeat while waiting andqueue_claim after an offer; queue_status andqueue_cancel are also available.

Paused or rejected

Treat the result as a semantic outcome. Do not invent a session, bypass admission, or silently retry transport I/O.

Disconnecting releases the managed admission and makes capacity available to the queue. See the Rust client or TypeScript client requirements before opening a managed connection.

Availability scope

The Lite tier uses the logical and managed 3D spatial definitions plus Ephemeral channels returned in its descriptor. Native QUIC, browser WebTransport, the TypeScript browser client, and managed spatial routing are Online. Persistence beyond Ephemeral remains Preview. Pro and Dedicated Preview access begins privately with founders; every client continues to follow the exact supported scope returned by Woven Host.