perf: lazy load authenticated office peers

src/interiors/officeScene.ts

@@ -99,13 +99,17 @@ import {
   type RobotSpec,
   type RobotView,
 } from "./robots.ts";
-import {
-  createScenePeers,
-  type ScenePeersOptions,
+import type {
+  ScenePeers,
+  ScenePeersOptions,
 } from "../realtime/scenePeers.ts";
 import type { EntityPoseSnapshot } from "../realtime/types.ts";
 
-export type OfficeRealtimePeersOptions = Omit<ScenePeersOptions, "project" | "groundAt">;
+export type CreateOfficeScenePeers = (options: ScenePeersOptions) => ScenePeers;
+export type OfficeRealtimePeersOptions = Omit<ScenePeersOptions, "project" | "groundAt"> & {
+  /** Injected by an authenticated caller so anonymous offices never download peer assets. */
+  create: CreateOfficeScenePeers;
+};
 
 /** Shared empty, so a pack with no robots does not allocate one per call. */
 const NO_ROBOTS: readonly RobotView[] = [];
@@ -526,8 +530,8 @@ export function createOfficeScene(office: Office, options: OfficeSceneOptions):
   // Geographic callbacks are required by the generic adapter but harmless here:
   // an office subscription sends validated local poses in metre coordinates.
   const realtimePeers = depth === "full" && options.realtimePeers
-    ? createScenePeers({
-        ...options.realtimePeers,
+    ? options.realtimePeers.create({
+        ...withoutPeerFactory(options.realtimePeers),
         project: () => [0, 0],
         groundAt: () => 0,
         localSceneUnitsPerMetre: options.realtimePeers.localSceneUnitsPerMetre ?? 1,
@@ -918,6 +922,11 @@ export function createOfficeScene(office: Office, options: OfficeSceneOptions):
   };
 }
 
+function withoutPeerFactory(options: OfficeRealtimePeersOptions): Omit<ScenePeersOptions, "project" | "groundAt"> {
+  const { create: _create, ...peerOptions } = options;
+  return peerOptions;
+}
+
 /**
  * The fixed interior rig: a soft high sun, a strong hemisphere for the bounce a
  * real room has and a real-time renderer does not, no sky and no fog.