@constructive-io/graphql-server 5.20.7 → 5.21.0

package/server.js

@@ -20,6 +20,7 @@ const agentic_1 = require("./agentic");
 const debug_db_snapshot_1 = require("./diagnostics/debug-db-snapshot");
 const debug_sampler_1 = require("./diagnostics/debug-sampler");
 const observability_1 = require("./diagnostics/observability");
+const admission_control_1 = require("./middleware/admission-control");
 const api_1 = require("./middleware/api");
 const auth_1 = require("./middleware/auth");
 // Auth cookie handling is done via AuthCookiePlugin in grafserv
@@ -38,6 +39,7 @@ const guard_1 = require("./middleware/observability/guard");
 const request_logger_1 = require("./middleware/observability/request-logger");
 const request_protection_1 = require("./middleware/request-protection");
 const routing_1 = require("./middleware/routing");
+const recorder_1 = require("./refusals/recorder");
 const log = new logger_1.Logger('server');
 /**
  * Creates and starts a GraphQL server instance
@@ -76,6 +78,7 @@ class Server {
     closed = false;
     httpServer = null;
     debugSampler = null;
+    refusalRecorder = null;
     constructor(opts) {
         this.opts = (0, graphql_env_1.getEnvOptions)(opts);
         const effectiveOpts = this.opts;
@@ -153,6 +156,13 @@ class Server {
         // Resolve the tenant's protection bounds before anything can spend budget
         // on the request (and before the GraphQL handler reads them for pgSettings).
         app.use((0, request_protection_1.createRequestProtectionMiddleware)());
+        // Spend the width and rate bounds the line above resolved, before a
+        // request can take a pool connection. Scoped to /graphql rather than
+        // mounted globally because a concurrency slot is held for as long as the
+        // handler runs: the SSE routes below are long-lived by design and would
+        // sit in the budget for the life of the stream. The other lanes need
+        // their own bound sized for streaming, not this one.
+        app.use('/graphql', (0, admission_control_1.createAdmissionControlMiddleware)());
         app.use((0, captcha_1.createCaptchaMiddleware)());
         // CSRF protection for cookie-authenticated requests
         // Skip CSRF for Bearer token auth (not vulnerable to CSRF) and anonymous requests
@@ -194,6 +204,11 @@ class Server {
         app.use(error_handler_1.errorHandler); // Catches all thrown errors
         this.app = app;
         this.debugSampler = observabilityEnabled ? (0, debug_sampler_1.startDebugSampler)(effectiveOpts) : null;
+        // Refusals are counted in memory by the middleware above and flushed to
+        // the platform table on a timer; the request path never touches the pool.
+        this.refusalRecorder = (0, recorder_1.createPlatformRefusalRecorder)(effectiveOpts);
+        (0, recorder_1.installRefusalRecorder)(this.refusalRecorder);
+        this.refusalRecorder.start();
     }
     listen() {
         const { server } = this.opts;
@@ -298,6 +313,11 @@ class Server {
         this.closed = true;
         this.shuttingDown = true;
         await this.removeEventListener();
+        if (this.refusalRecorder) {
+            (0, recorder_1.installRefusalRecorder)(null);
+            await this.refusalRecorder.stop();
+            this.refusalRecorder = null;
+        }
         if (this.debugSampler) {
             await this.debugSampler.stop();
             this.debugSampler = null;