@enbox/dwn-server 0.0.2 → 0.0.4

package/dist/esm/src/config.d.ts

@@ -2,9 +2,6 @@ export type DwnServerConfig = typeof config;
 export declare const config: {
     /**
      * Used to populate the `server` property returned by the `/info` endpoint.
-     *
-     * If running using `npm` the `process.env.npm_package_name` variable exists and we use that,
-     * otherwise we fall back on the use defined `DWN_SERVER_PACKAGE_NAME` or `@enbox/dwn-server`.
      */
     serverName: string;
     /**
@@ -30,26 +27,144 @@ export declare const config: {
      * Used to populate the `version` and `sdkVersion` properties returned by the `/info` endpoint.
      *
      * The `version` and `sdkVersion` are pulled from `package.json` at runtime.
-     * If running using `npm` the `process.env.npm_package_json` variable exists as the filepath, so we use that.
-     * Otherwise we check to see if a specific `DWN_SERVER_PACKAGE_JSON` exists, if it does we use that.
-     * Finally if both of those options don't exist we resort to the path within the docker server image, located at `/dwn-server/package.json`
+     * If `DWN_SERVER_PACKAGE_JSON` is set, we use that path.
+     * Otherwise we resort to the path within the docker server image, located at `/dwn-server/package.json`.
      */
     packageJsonPath: string;
+    /**
+     * Maximum size of data that can be provided with a RecordsWrite.
+     * Request bodies up to this size are buffered fully into memory, so the
+     * default should be conservative enough to prevent memory exhaustion from
+     * concurrent large uploads. Operators can raise the limit via the
+     * `MAX_RECORD_DATA_SIZE` env var (e.g. `'1gb'`).
+     */
     maxRecordDataSize: number;
+    /**
+     * Maximum number of unacknowledged subscription events the server will send
+     * per subscription before pausing delivery. Clients must send `rpc.ack` to
+     * advance the window. Configurable via `DWN_MAX_IN_FLIGHT` env var.
+     */
+    maxInFlight: number;
     webSocketSupport: boolean;
     /**
-     * Path to DWN Event Stream plugin to use. Default single-node implementation will be used if left empty.
+     * Path to DWN EventLog plugin to use. Default in-memory implementation will be used if left empty.
+     * Also accepts the legacy `DWN_EVENT_STREAM_PLUGIN_PATH` env var for backward compatibility.
      */
-    eventStreamPluginPath: string;
+    eventLogPluginPath: string;
     messageStore: string;
     dataStore: string;
-    eventLog: string;
+    stateIndex: string;
     resumableTaskStore: string;
+    /**
+     * PostgreSQL connection pool tuning. When multiple DWN stores share the same
+     * Postgres connection URL, a single shared pool is used instead of one pool
+     * per store (which would be 4 pools x 10 default connections = 40 connections).
+     */
+    pgPoolMin: number;
+    pgPoolMax: number;
+    pgPoolIdleTimeout: number;
     registrationStoreUrl: string;
     registrationProofOfWorkSeed: string;
     registrationProofOfWorkEnabled: boolean;
     registrationProofOfWorkInitialMaxHash: string;
     termsOfServiceFilePath: string;
+    providerAuthEnabled: boolean;
+    providerAuthAuthorizeUrl: string;
+    providerAuthTokenUrl: string;
+    providerAuthRefreshUrl: string;
+    providerAuthManagementUrl: string;
+    providerAuthPluginPath: string;
+    providerAuthJwtSecret: string;
+    providerAuthJwtJwksUrl: string;
     logLevel: string;
+    /**
+     * Bearer token for the admin API. If unset (or empty), the admin API is disabled entirely.
+     * Can also be read from a file path via `DWN_ADMIN_TOKEN_FILE` (useful for Docker secrets).
+     */
+    adminToken: string;
+    /**
+     * Maximum number of recent DWN activity events retained in the in-memory
+     * ring buffer for the admin `/events` endpoint. Defaults to 10,000.
+     */
+    adminActivityLogCapacity: number;
+    /**
+     * Interval (in seconds) at which Prometheus gauge metrics are updated from
+     * the admin store. Defaults to 30 seconds.
+     */
+    adminMetricsUpdateIntervalSeconds: number;
+    /**
+     * Default maximum number of messages a tenant may store. 0 = unlimited (default).
+     * Per-tenant overrides are managed via the admin API.
+     */
+    quotaMaxMessages: number;
+    /**
+     * Default maximum data storage in bytes a tenant may use. 0 = unlimited (default).
+     * Per-tenant overrides are managed via the admin API.
+     */
+    quotaMaxStorageBytes: number;
+    /**
+     * Maximum age of audit log entries in days. Entries older than this are purged.
+     * 0 = no age limit (default: 90 days).
+     *
+     * @see https://github.com/enboxorg/enbox/issues/394
+     */
+    auditLogMaxAgeDays: number;
+    /**
+     * Maximum number of audit log rows to retain. Oldest entries are purged when exceeded.
+     * 0 = no row limit (default: 100000).
+     *
+     * @see https://github.com/enboxorg/enbox/issues/394
+     */
+    auditLogMaxRows: number;
+    /**
+     * Maximum HTTP requests per second per IP address. Set to 0 to disable.
+     * Defaults to 30 req/s which is generous for normal usage while limiting abuse.
+     * Can be reconfigured at runtime via the admin `PATCH /config` endpoint.
+     */
+    rateLimitRequestsPerSecond: number;
+    /**
+     * Maximum burst size for per-IP rate limiting. Allows short spikes above the
+     * sustained rate without triggering 429s. Defaults to 50.
+     */
+    rateLimitBurst: number;
+    /**
+     * Maximum DWN requests per second per tenant DID. Set to 0 to disable.
+     * Defaults to 20 req/s. Applies to both HTTP and WebSocket transports.
+     * Can be reconfigured at runtime via the admin `PATCH /config` endpoint.
+     */
+    rateLimitTenantRequestsPerSecond: number;
+    /**
+     * Maximum burst size for per-tenant rate limiting. Defaults to 50.
+     */
+    rateLimitTenantBurst: number;
+    /**
+     * Enable endpoint forwarding: when a RecordsWrite/RecordsDelete is processed,
+     * forward the original signed message to the tenant's other DWN service
+     * endpoints (discovered via DID resolution). Disabled by default.
+     */
+    forwardingEnabled: boolean;
+    /**
+     * Enable protocol-aware record delivery: when a RecordsWrite/RecordsDelete is
+     * processed at a protocol path with `$delivery`, proactively deliver to
+     * participants' DWN endpoints. Disabled by default.
+     */
+    deliveryEnabled: boolean;
+    /**
+     * Maximum number of concurrent outbound delivery/forwarding requests.
+     * Prevents unbounded parallelism when delivering to many providers.
+     * Defaults to 10.
+     */
+    deliveryMaxConcurrency: number;
+    /**
+     * TTL in seconds for caching DID document service endpoint resolution results.
+     * Avoids resolving the same DID document on every delivery. Defaults to 300 (5 min).
+     */
+    deliveryEndpointCacheTtlSeconds: number;
+    /**
+     * TTL in seconds for the recently-forwarded messageCid deduplication cache.
+     * Messages with CIDs in this cache are not forwarded again, reducing redundant
+     * outbound requests between peer endpoints. Defaults to 60.
+     */
+    forwardingDeduplicationTtlSeconds: number;
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/esm/src/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,eAAe,GAAG,OAAO,MAAM,CAAC;AAE5C,eAAO,MAAM,MAAM;IACjB;;;;;OAKG;;IAGH;;;;OAIG;;IAGH;;OAEG;;IAGH;;;;;;;OAOG;;IAGH;;;;;;;OAOG;;;;IAQH;;OAEG;;;;;;;;;;;;CAkBJ,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,eAAe,GAAG,OAAO,MAAM,CAAC;AAE5C,eAAO,MAAM,MAAM;IACjB;;OAEG;;IAGH;;;;OAIG;;IAGH;;OAEG;;IAGH;;;;;;;OAOG;;IAGH;;;;;;OAMG;;IAEH;;;;;;OAMG;;IAGH;;;;OAIG;;;IAMH;;;OAGG;;;;;;IASH;;;;OAIG;;;;;;;;;;;;;;;;;;IAyBH;;;OAGG;;IAOH;;;OAGG;;IAGH;;;OAGG;;IAOH;;;OAGG;;IAGH;;;OAGG;;IAOH;;;;;OAKG;;IAGH;;;;;OAKG;;IAOH;;;;OAIG;;IAGH;;;OAGG;;IAGH;;;;OAIG;;IAGH;;OAEG;;IAOH;;;;OAIG;;IAGH;;;;OAIG;;IAGH;;;;OAIG;;IAGH;;;OAGG;;IAGH;;;;OAIG;;CAEJ,CAAC"}

package/dist/esm/src/config.js

@@ -1,12 +1,10 @@
+import { readFileSync } from 'fs';
 import bytes from 'bytes';
 export const config = {
     /**
      * Used to populate the `server` property returned by the `/info` endpoint.
-     *
-     * If running using `npm` the `process.env.npm_package_name` variable exists and we use that,
-     * otherwise we fall back on the use defined `DWN_SERVER_PACKAGE_NAME` or `@enbox/dwn-server`.
      */
-    serverName: process.env.npm_package_name || process.env.DWN_SERVER_PACKAGE_NAME || '@enbox/dwn-server',
+    serverName: process.env.DWN_SERVER_PACKAGE_NAME || '@enbox/dwn-server',
     /**
      * The base external URL of this DWN.
      * This is used to construct URL paths such as the `Request URI` in the Web5 Connect flow.
@@ -30,31 +28,175 @@ export const config = {
      * Used to populate the `version` and `sdkVersion` properties returned by the `/info` endpoint.
      *
      * The `version` and `sdkVersion` are pulled from `package.json` at runtime.
-     * If running using `npm` the `process.env.npm_package_json` variable exists as the filepath, so we use that.
-     * Otherwise we check to see if a specific `DWN_SERVER_PACKAGE_JSON` exists, if it does we use that.
-     * Finally if both of those options don't exist we resort to the path within the docker server image, located at `/dwn-server/package.json`
+     * If `DWN_SERVER_PACKAGE_JSON` is set, we use that path.
+     * Otherwise we resort to the path within the docker server image, located at `/dwn-server/package.json`.
+     */
+    packageJsonPath: process.env.DWN_SERVER_PACKAGE_JSON || '/dwn-server/package.json',
+    /**
+     * Maximum size of data that can be provided with a RecordsWrite.
+     * Request bodies up to this size are buffered fully into memory, so the
+     * default should be conservative enough to prevent memory exhaustion from
+     * concurrent large uploads. Operators can raise the limit via the
+     * `MAX_RECORD_DATA_SIZE` env var (e.g. `'1gb'`).
      */
-    packageJsonPath: process.env.npm_package_json || process.env.DWN_SERVER_PACKAGE_JSON || '/dwn-server/package.json',
-    // max size of data that can be provided with a RecordsWrite
-    maxRecordDataSize: bytes(process.env.MAX_RECORD_DATA_SIZE || '1gb'),
+    maxRecordDataSize: bytes(process.env.MAX_RECORD_DATA_SIZE || '100mb'),
+    /**
+     * Maximum number of unacknowledged subscription events the server will send
+     * per subscription before pausing delivery. Clients must send `rpc.ack` to
+     * advance the window. Configurable via `DWN_MAX_IN_FLIGHT` env var.
+     */
+    maxInFlight: parseInt(process.env.DWN_MAX_IN_FLIGHT || '32'),
     // whether to enable 'ws:'
     webSocketSupport: { on: true, off: false }[process.env.DS_WEBSOCKET_SERVER] ?? true,
     /**
-     * Path to DWN Event Stream plugin to use. Default single-node implementation will be used if left empty.
+     * Path to DWN EventLog plugin to use. Default in-memory implementation will be used if left empty.
+     * Also accepts the legacy `DWN_EVENT_STREAM_PLUGIN_PATH` env var for backward compatibility.
      */
-    eventStreamPluginPath: process.env.DWN_EVENT_STREAM_PLUGIN_PATH,
+    eventLogPluginPath: process.env.DWN_EVENT_LOG_PLUGIN_PATH || process.env.DWN_EVENT_STREAM_PLUGIN_PATH,
     // where to store persistent data
     messageStore: process.env.DWN_STORAGE_MESSAGES || process.env.DWN_STORAGE || 'level://data',
     dataStore: process.env.DWN_STORAGE_DATA || process.env.DWN_STORAGE || 'level://data',
-    eventLog: process.env.DWN_STORAGE_EVENTS || process.env.DWN_STORAGE || 'level://data',
+    stateIndex: process.env.DWN_STORAGE_STATE_INDEX || process.env.DWN_STORAGE || 'level://data',
     resumableTaskStore: process.env.DWN_STORAGE_RESUMABLE_TASKS || process.env.DWN_STORAGE || 'level://data',
+    /**
+     * PostgreSQL connection pool tuning. When multiple DWN stores share the same
+     * Postgres connection URL, a single shared pool is used instead of one pool
+     * per store (which would be 4 pools x 10 default connections = 40 connections).
+     */
+    pgPoolMin: parseInt(process.env.DWN_PG_POOL_MIN || '5'),
+    pgPoolMax: parseInt(process.env.DWN_PG_POOL_MAX || '30'),
+    pgPoolIdleTimeout: parseInt(process.env.DWN_PG_POOL_IDLE_TIMEOUT || '30000'),
     // tenant registration feature configuration
     registrationStoreUrl: process.env.DWN_REGISTRATION_STORE_URL || process.env.DWN_STORAGE,
     registrationProofOfWorkSeed: process.env.DWN_REGISTRATION_PROOF_OF_WORK_SEED,
     registrationProofOfWorkEnabled: process.env.DWN_REGISTRATION_PROOF_OF_WORK_ENABLED === 'true',
     registrationProofOfWorkInitialMaxHash: process.env.DWN_REGISTRATION_PROOF_OF_WORK_INITIAL_MAX_HASH,
     termsOfServiceFilePath: process.env.DWN_TERMS_OF_SERVICE_FILE_PATH,
+    // Provider auth configuration for paid DWN registration
+    providerAuthEnabled: process.env.DWN_PROVIDER_AUTH_ENABLED === 'true',
+    providerAuthAuthorizeUrl: process.env.DWN_PROVIDER_AUTH_AUTHORIZE_URL,
+    providerAuthTokenUrl: process.env.DWN_PROVIDER_AUTH_TOKEN_URL,
+    providerAuthRefreshUrl: process.env.DWN_PROVIDER_AUTH_REFRESH_URL,
+    providerAuthManagementUrl: process.env.DWN_PROVIDER_AUTH_MANAGEMENT_URL,
+    providerAuthPluginPath: process.env.DWN_PROVIDER_AUTH_PLUGIN_PATH,
+    providerAuthJwtSecret: process.env.DWN_PROVIDER_AUTH_JWT_SECRET,
+    providerAuthJwtJwksUrl: process.env.DWN_PROVIDER_AUTH_JWT_JWKS_URL,
     // log level - trace/debug/info/warn/error
     logLevel: process.env.DWN_SERVER_LOG_LEVEL || 'INFO',
+    /**
+     * Bearer token for the admin API. If unset (or empty), the admin API is disabled entirely.
+     * Can also be read from a file path via `DWN_ADMIN_TOKEN_FILE` (useful for Docker secrets).
+     */
+    adminToken: process.env.DWN_ADMIN_TOKEN || (process.env.DWN_ADMIN_TOKEN_FILE
+        ? readAdminTokenFromFile(process.env.DWN_ADMIN_TOKEN_FILE)
+        : undefined),
+    /**
+     * Maximum number of recent DWN activity events retained in the in-memory
+     * ring buffer for the admin `/events` endpoint. Defaults to 10,000.
+     */
+    adminActivityLogCapacity: parseInt(process.env.DWN_ADMIN_ACTIVITY_LOG_CAPACITY || '10000'),
+    /**
+     * Interval (in seconds) at which Prometheus gauge metrics are updated from
+     * the admin store. Defaults to 30 seconds.
+     */
+    adminMetricsUpdateIntervalSeconds: parseInt(process.env.DWN_ADMIN_METRICS_UPDATE_INTERVAL || '30'),
+    // ---------------------------------------------------------------------------
+    // Per-tenant storage quotas
+    // ---------------------------------------------------------------------------
+    /**
+     * Default maximum number of messages a tenant may store. 0 = unlimited (default).
+     * Per-tenant overrides are managed via the admin API.
+     */
+    quotaMaxMessages: parseInt(process.env.DWN_QUOTA_MAX_MESSAGES || '0'),
+    /**
+     * Default maximum data storage in bytes a tenant may use. 0 = unlimited (default).
+     * Per-tenant overrides are managed via the admin API.
+     */
+    quotaMaxStorageBytes: parseInt(process.env.DWN_QUOTA_MAX_STORAGE_BYTES || '0'),
+    // ---------------------------------------------------------------------------
+    // Audit log retention
+    // ---------------------------------------------------------------------------
+    /**
+     * Maximum age of audit log entries in days. Entries older than this are purged.
+     * 0 = no age limit (default: 90 days).
+     *
+     * @see https://github.com/enboxorg/enbox/issues/394
+     */
+    auditLogMaxAgeDays: parseInt(process.env.DWN_AUDIT_LOG_MAX_AGE_DAYS || '90'),
+    /**
+     * Maximum number of audit log rows to retain. Oldest entries are purged when exceeded.
+     * 0 = no row limit (default: 100000).
+     *
+     * @see https://github.com/enboxorg/enbox/issues/394
+     */
+    auditLogMaxRows: parseInt(process.env.DWN_AUDIT_LOG_MAX_ROWS || '100000'),
+    // ---------------------------------------------------------------------------
+    // Rate limiting
+    // ---------------------------------------------------------------------------
+    /**
+     * Maximum HTTP requests per second per IP address. Set to 0 to disable.
+     * Defaults to 30 req/s which is generous for normal usage while limiting abuse.
+     * Can be reconfigured at runtime via the admin `PATCH /config` endpoint.
+     */
+    rateLimitRequestsPerSecond: parseInt(process.env.DWN_RATE_LIMIT_REQUESTS_PER_SECOND || '30'),
+    /**
+     * Maximum burst size for per-IP rate limiting. Allows short spikes above the
+     * sustained rate without triggering 429s. Defaults to 50.
+     */
+    rateLimitBurst: parseInt(process.env.DWN_RATE_LIMIT_BURST || '50'),
+    /**
+     * Maximum DWN requests per second per tenant DID. Set to 0 to disable.
+     * Defaults to 20 req/s. Applies to both HTTP and WebSocket transports.
+     * Can be reconfigured at runtime via the admin `PATCH /config` endpoint.
+     */
+    rateLimitTenantRequestsPerSecond: parseInt(process.env.DWN_RATE_LIMIT_TENANT_REQUESTS_PER_SECOND || '20'),
+    /**
+     * Maximum burst size for per-tenant rate limiting. Defaults to 50.
+     */
+    rateLimitTenantBurst: parseInt(process.env.DWN_RATE_LIMIT_TENANT_BURST || '50'),
+    // ---------------------------------------------------------------------------
+    // Record delivery & endpoint forwarding
+    // ---------------------------------------------------------------------------
+    /**
+     * Enable endpoint forwarding: when a RecordsWrite/RecordsDelete is processed,
+     * forward the original signed message to the tenant's other DWN service
+     * endpoints (discovered via DID resolution). Disabled by default.
+     */
+    forwardingEnabled: process.env.DWN_FORWARDING_ENABLED === 'true',
+    /**
+     * Enable protocol-aware record delivery: when a RecordsWrite/RecordsDelete is
+     * processed at a protocol path with `$delivery`, proactively deliver to
+     * participants' DWN endpoints. Disabled by default.
+     */
+    deliveryEnabled: process.env.DWN_DELIVERY_ENABLED === 'true',
+    /**
+     * Maximum number of concurrent outbound delivery/forwarding requests.
+     * Prevents unbounded parallelism when delivering to many providers.
+     * Defaults to 10.
+     */
+    deliveryMaxConcurrency: parseInt(process.env.DWN_DELIVERY_MAX_CONCURRENCY || '10'),
+    /**
+     * TTL in seconds for caching DID document service endpoint resolution results.
+     * Avoids resolving the same DID document on every delivery. Defaults to 300 (5 min).
+     */
+    deliveryEndpointCacheTtlSeconds: parseInt(process.env.DWN_DELIVERY_ENDPOINT_CACHE_TTL || '300'),
+    /**
+     * TTL in seconds for the recently-forwarded messageCid deduplication cache.
+     * Messages with CIDs in this cache are not forwarded again, reducing redundant
+     * outbound requests between peer endpoints. Defaults to 60.
+     */
+    forwardingDeduplicationTtlSeconds: parseInt(process.env.DWN_FORWARDING_DEDUP_TTL || '60'),
 };
+/**
+ * Reads the admin token from a file path, trimming whitespace.
+ * Returns `undefined` if the file cannot be read.
+ */
+function readAdminTokenFromFile(filePath) {
+    try {
+        return readFileSync(filePath).toString().trim() || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 //# sourceMappingURL=config.js.map

package/dist/esm/src/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,mBAAmB;IAEtG;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB;IAE5D;;OAEG;IACH,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC;IAE7C;;;;;;;OAOG;IACH,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,WAAW;IAEzD;;;;;;;OAOG;IACH,eAAe,EAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAK,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,0BAA0B;IACpH,4DAA4D;IAC5D,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,KAAK,CAAC;IAEnE,0BAA0B;IAC1B,gBAAgB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,IAAI;IAEnF;;OAEG;IACH,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B;IAE/D,iCAAiC;IACjC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,cAAc;IAC3F,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,cAAc;IACpF,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,cAAc;IACrF,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,cAAc;IAExG,4CAA4C;IAC5C,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;IACvF,2BAA2B,EAAE,OAAO,CAAC,GAAG,CAAC,mCAAmC;IAC5E,8BAA8B,EAAE,OAAO,CAAC,GAAG,CAAC,sCAAsC,KAAK,MAAM;IAC7F,qCAAqC,EAAE,OAAO,CAAC,GAAG,CAAC,+CAA+C;IAClG,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B;IAElE,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM;CACrD,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAElC,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB;;OAEG;IACH,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,mBAAmB;IAEtE;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB;IAE5D;;OAEG;IACH,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC;IAE7C;;;;;;;OAOG;IACH,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,WAAW;IAEzD;;;;;;OAMG;IACH,eAAe,EAAK,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,0BAA0B;IACrF;;;;;;OAMG;IACH,iBAAiB,EAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC;IAEtE;;;;OAIG;IACH,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAE5D,0BAA0B;IAC1B,gBAAgB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,IAAI;IAEnF;;;OAGG;IACH,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,CAAC,GAAG,CAAC,4BAA4B;IAErG,iCAAiC;IACjC,YAAY,EAAS,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,cAAc;IAClG,SAAS,EAAY,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,cAAc;IAC9F,UAAU,EAAW,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,cAAc;IACrG,kBAAkB,EAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,cAAc;IAEzG;;;;OAIG;IACH,SAAS,EAAW,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC;IAChE,SAAS,EAAW,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC;IACjE,iBAAiB,EAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,OAAO,CAAC;IAE7E,4CAA4C;IAC5C,oBAAoB,EAAoB,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;IACzG,2BAA2B,EAAa,OAAO,CAAC,GAAG,CAAC,mCAAmC;IACvF,8BAA8B,EAAU,OAAO,CAAC,GAAG,CAAC,sCAAsC,KAAK,MAAM;IACrG,qCAAqC,EAAG,OAAO,CAAC,GAAG,CAAC,+CAA+C;IACnG,sBAAsB,EAAkB,OAAO,CAAC,GAAG,CAAC,8BAA8B;IAElF,wDAAwD;IACxD,mBAAmB,EAAS,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,MAAM;IAC5E,wBAAwB,EAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B;IACvE,oBAAoB,EAAQ,OAAO,CAAC,GAAG,CAAC,2BAA2B;IACnE,sBAAsB,EAAM,OAAO,CAAC,GAAG,CAAC,6BAA6B;IACrE,yBAAyB,EAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC;IACxE,sBAAsB,EAAM,OAAO,CAAC,GAAG,CAAC,6BAA6B;IACrE,qBAAqB,EAAO,OAAO,CAAC,GAAG,CAAC,4BAA4B;IACpE,sBAAsB,EAAM,OAAO,CAAC,GAAG,CAAC,8BAA8B;IAEtE,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM;IAEpD;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CACzC,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAC9B,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC1D,CAAC,CAAC,SAAS,CACd;IAED;;;OAGG;IACH,wBAAwB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,OAAO,CAAC;IAE1F;;;OAGG;IACH,iCAAiC,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,IAAI,CAAC;IAElG,8EAA8E;IAC9E,4BAA4B;IAC5B,8EAA8E;IAE9E;;;OAGG;IACH,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,GAAG,CAAC;IAErE;;;OAGG;IACH,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,GAAG,CAAC;IAE9E,8EAA8E;IAC9E,sBAAsB;IACtB,8EAA8E;IAE9E;;;;;OAKG;IACH,kBAAkB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,CAAC;IAE5E;;;;;OAKG;IACH,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,QAAQ,CAAC;IAEzE,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E;;;;OAIG;IACH,0BAA0B,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,IAAI,CAAC;IAE5F;;;OAGG;IACH,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC;IAElE;;;;OAIG;IACH,gCAAgC,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yCAAyC,IAAI,IAAI,CAAC;IAEzG;;OAEG;IACH,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,IAAI,CAAC;IAE/E,8EAA8E;IAC9E,wCAAwC;IACxC,8EAA8E;IAE9E;;;;OAIG;IACH,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;IAEhE;;;;OAIG;IACH,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM;IAE5D;;;;OAIG;IACH,sBAAsB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,IAAI,CAAC;IAElF;;;OAGG;IACH,+BAA+B,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,KAAK,CAAC;IAE/F;;;;OAIG;IACH,iCAAiC,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,IAAI,CAAC;CAC1F,CAAC;AAEF;;;GAGG;AACH,SAAS,sBAAsB,CAAC,QAAgB;IAC9C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/esm/src/connection/connection-manager.d.ts

@@ -1,25 +1,48 @@
-import type { Dwn } from "@enbox/dwn-sdk-js";
-import type { IncomingMessage } from "http";
-import type { WebSocket } from 'ws';
-import { SocketConnection } from "./socket-connection.js";
+import type { Dwn } from '@enbox/dwn-sdk-js';
+import type { ServerWebSocket } from 'bun';
+import type { ActivityLog } from '../admin/activity-log.js';
+import type { AdminConnectionSnapshot } from '../admin/types.js';
+import type { AdminStore } from '../admin/admin-store.js';
+import type { DwnServerConfig } from '../config.js';
+import type { MessageProcessedHook } from '../message-processed-hook.js';
+import type { RateLimiter } from '../rate-limiter.js';
+import type { RegistrationStore } from '../registration/registration-store.js';
+import type { WsData } from '../http-api.js';
+import { SocketConnection } from './socket-connection.js';
 /**
  * Interface for managing `WebSocket` connections as they arrive.
  */
 export interface ConnectionManager {
-    /** connect handler used for the `WebSockets` `'connection'` event. */
-    connect(socket: WebSocket, request?: IncomingMessage): Promise<void>;
+    /** connect handler invoked when a new WebSocket connection is established. */
+    connect(socket: ServerWebSocket<WsData>): Promise<void>;
     /** closes all of the connections */
     closeAll(): Promise<void>;
+    /** Returns the number of active connections. */
+    getConnectionCount(): number;
+    /** Returns the total number of active subscriptions across all connections. */
+    getSubscriptionCount(): number;
+    /** Returns serializable snapshots of all active connections. */
+    getConnectionSnapshots(): AdminConnectionSnapshot[];
 }
 /**
  * A Simple In Memory ConnectionManager implementation.
- * It uses a `Map<WebSocket, SocketConnection>` to manage connections.
+ * It uses a `Map<ServerWebSocket, SocketConnection>` to manage connections.
  */
 export declare class InMemoryConnectionManager implements ConnectionManager {
     private dwn;
     private connections;
-    constructor(dwn: Dwn, connections?: Map<WebSocket, SocketConnection>);
-    connect(socket: WebSocket): Promise<void>;
+    private maxInFlight?;
+    private activityLog?;
+    private adminStore?;
+    private registrationStore?;
+    private serverConfig?;
+    private tenantRateLimiter?;
+    private messageProcessedHooks?;
+    constructor(dwn: Dwn, connections?: Map<ServerWebSocket<WsData>, SocketConnection>, maxInFlight?: number, activityLog?: ActivityLog, adminStore?: AdminStore, registrationStore?: RegistrationStore, serverConfig?: DwnServerConfig, tenantRateLimiter?: RateLimiter, messageProcessedHooks?: MessageProcessedHook[]);
+    connect(socket: ServerWebSocket<WsData>): Promise<void>;
     closeAll(): Promise<void>;
+    getConnectionCount(): number;
+    getSubscriptionCount(): number;
+    getConnectionSnapshots(): AdminConnectionSnapshot[];
 }
 //# sourceMappingURL=connection-manager.d.ts.map

package/dist/esm/src/connection/connection-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection-manager.d.ts","sourceRoot":"","sources":["../../../../src/connection/connection-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,sEAAsE;IACtE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,oCAAoC;IACpC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1B;AAED;;;GAGG;AACH,qBAAa,yBAA0B,YAAW,iBAAiB;IACrD,OAAO,CAAC,GAAG;IAAO,OAAO,CAAC,WAAW;gBAA7B,GAAG,EAAE,GAAG,EAAU,WAAW,GAAE,GAAG,CAAC,SAAS,EAAE,gBAAgB,CAAa;IAEzF,OAAO,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IASzC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAKhC"}
+{"version":3,"file":"connection-manager.d.ts","sourceRoot":"","sources":["../../../../src/connection/connection-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,KAAK,CAAC;AAE3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,8EAA8E;IAC9E,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,oCAAoC;IACpC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,gDAAgD;IAChD,kBAAkB,IAAI,MAAM,CAAC;IAC7B,+EAA+E;IAC/E,oBAAoB,IAAI,MAAM,CAAC;IAC/B,gEAAgE;IAChE,sBAAsB,IAAI,uBAAuB,EAAE,CAAC;CACrD;AAED;;;GAGG;AACH,qBAAa,yBAA0B,YAAW,iBAAiB;IAE/D,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,WAAW,CAAC;IACpB,OAAO,CAAC,WAAW,CAAC;IACpB,OAAO,CAAC,UAAU,CAAC;IACnB,OAAO,CAAC,iBAAiB,CAAC;IAC1B,OAAO,CAAC,YAAY,CAAC;IACrB,OAAO,CAAC,iBAAiB,CAAC;IAC1B,OAAO,CAAC,qBAAqB,CAAC;gBARtB,GAAG,EAAE,GAAG,EACR,WAAW,GAAE,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAa,EACvE,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,CAAC,EAAE,WAAW,EACzB,UAAU,CAAC,EAAE,UAAU,EACvB,iBAAiB,CAAC,EAAE,iBAAiB,EACrC,YAAY,CAAC,EAAE,eAAe,EAC9B,iBAAiB,CAAC,EAAE,WAAW,EAC/B,qBAAqB,CAAC,EAAE,oBAAoB,EAAE;IAGlD,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBvD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAM/B,kBAAkB,IAAI,MAAM;IAI5B,oBAAoB,IAAI,MAAM;IAQ9B,sBAAsB,IAAI,uBAAuB,EAAE;CAOpD"}

package/dist/esm/src/connection/connection-manager.js

@@ -1,26 +1,59 @@
-import { SocketConnection } from "./socket-connection.js";
+import { SocketConnection } from './socket-connection.js';
 /**
  * A Simple In Memory ConnectionManager implementation.
- * It uses a `Map<WebSocket, SocketConnection>` to manage connections.
+ * It uses a `Map<ServerWebSocket, SocketConnection>` to manage connections.
  */
 export class InMemoryConnectionManager {
     dwn;
     connections;
-    constructor(dwn, connections = new Map()) {
+    maxInFlight;
+    activityLog;
+    adminStore;
+    registrationStore;
+    serverConfig;
+    tenantRateLimiter;
+    messageProcessedHooks;
+    constructor(dwn, connections = new Map(), maxInFlight, activityLog, adminStore, registrationStore, serverConfig, tenantRateLimiter, messageProcessedHooks) {
         this.dwn = dwn;
         this.connections = connections;
+        this.maxInFlight = maxInFlight;
+        this.activityLog = activityLog;
+        this.adminStore = adminStore;
+        this.registrationStore = registrationStore;
+        this.serverConfig = serverConfig;
+        this.tenantRateLimiter = tenantRateLimiter;
+        this.messageProcessedHooks = messageProcessedHooks;
     }
     async connect(socket) {
         const connection = new SocketConnection(socket, this.dwn, () => {
             // this is the onClose handler to clean up any closed connections.
             this.connections.delete(socket);
-        });
+        }, this.maxInFlight, this.activityLog, this.adminStore, this.registrationStore, this.serverConfig, this.tenantRateLimiter, this.messageProcessedHooks);
+        // Attach the connection to the ws.data so Bun's websocket handlers can delegate to it.
+        socket.data.connection = connection;
         this.connections.set(socket, connection);
     }
     async closeAll() {
         const closePromises = [];
-        this.connections.forEach(connection => closePromises.push(connection.close()));
+        this.connections.forEach((connection) => closePromises.push(connection.close()));
         await Promise.all(closePromises);
     }
+    getConnectionCount() {
+        return this.connections.size;
+    }
+    getSubscriptionCount() {
+        let count = 0;
+        this.connections.forEach((conn) => {
+            count += conn.subscriptionCount;
+        });
+        return count;
+    }
+    getConnectionSnapshots() {
+        const snapshots = [];
+        this.connections.forEach((conn) => {
+            snapshots.push(conn.toSnapshot());
+        });
+        return snapshots;
+    }
 }
 //# sourceMappingURL=connection-manager.js.map

package/dist/esm/src/connection/connection-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"connection-manager.js","sourceRoot":"","sources":["../../../../src/connection/connection-manager.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAY1D;;;GAGG;AACH,MAAM,OAAO,yBAAyB;IAChB;IAAkB;IAAtC,YAAoB,GAAQ,EAAU,cAAgD,IAAI,GAAG,EAAE;QAA3E,QAAG,GAAH,GAAG,CAAK;QAAU,gBAAW,GAAX,WAAW,CAA8C;IAAG,CAAC;IAEnG,KAAK,CAAC,OAAO,CAAC,MAAiB;QAC7B,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;YAC7D,kEAAkE;YAClE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,aAAa,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACnC,CAAC;CACF"}
+{"version":3,"file":"connection-manager.js","sourceRoot":"","sources":["../../../../src/connection/connection-manager.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAkB1D;;;GAGG;AACH,MAAM,OAAO,yBAAyB;IAE1B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IATV,YACU,GAAQ,EACR,cAA8D,IAAI,GAAG,EAAE,EACvE,WAAoB,EACpB,WAAyB,EACzB,UAAuB,EACvB,iBAAqC,EACrC,YAA8B,EAC9B,iBAA+B,EAC/B,qBAA8C;QAR9C,QAAG,GAAH,GAAG,CAAK;QACR,gBAAW,GAAX,WAAW,CAA4D;QACvE,gBAAW,GAAX,WAAW,CAAS;QACpB,gBAAW,GAAX,WAAW,CAAc;QACzB,eAAU,GAAV,UAAU,CAAa;QACvB,sBAAiB,GAAjB,iBAAiB,CAAoB;QACrC,iBAAY,GAAZ,YAAY,CAAkB;QAC9B,sBAAiB,GAAjB,iBAAiB,CAAc;QAC/B,0BAAqB,GAArB,qBAAqB,CAAyB;IACrD,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,MAA+B;QAC3C,MAAM,UAAU,GAAG,IAAI,gBAAgB,CACrC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;YACrB,kEAAkE;YAClE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC,EACD,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,EAClC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAC/G,CAAC;QAEF,uFAAuF;QACvF,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAEpC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,aAAa,GAAoB,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACnC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED,oBAAoB;QAClB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAChC,KAAK,IAAI,IAAI,CAAC,iBAAiB,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sBAAsB;QACpB,MAAM,SAAS,GAA8B,EAAE,CAAC;QAChD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAChC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}

package/dist/esm/src/connection/flow-controller.d.ts

@@ -0,0 +1,53 @@
+import type { SubscriptionMessage } from '@enbox/dwn-sdk-js';
+import type { JsonRpcId, JsonRpcSuccessResponse } from '@enbox/dwn-clients';
+/** Default maximum number of unacknowledged events before pausing delivery. */
+export declare const DEFAULT_MAX_IN_FLIGHT = 32;
+/** Maximum buffer size before the subscription is force-closed to prevent OOM. */
+export declare const MAX_BUFFER_SIZE = 1000;
+/**
+ * Per-subscription flow controller that enforces a sliding window of
+ * unacknowledged events. When the window is full, incoming events are
+ * buffered. When the client sends `rpc.ack` with a cursor, events up
+ * to that cursor are acknowledged and buffered events are flushed.
+ *
+ * If the buffer exceeds {@link MAX_BUFFER_SIZE}, the subscription is
+ * closed via the provided `onOverflow` callback to prevent unbounded
+ * memory growth.
+ */
+export declare class FlowController {
+    private readonly subscriptionId;
+    private readonly maxInFlight;
+    private readonly send;
+    private readonly onOverflow;
+    /** Ordered list of cursors for events that have been sent but not yet acknowledged. */
+    private unacked;
+    /** Buffer of events waiting to be sent once the window opens. */
+    private buffer;
+    /** Whether the controller has been closed due to overflow. */
+    private closed;
+    constructor(subscriptionId: JsonRpcId, maxInFlight: number, send: (response: JsonRpcSuccessResponse) => void, onOverflow: () => void);
+    /**
+     * Accept an incoming {@link SubscriptionMessage} from the EventLog listener.
+     * If the window has room, send immediately. Otherwise buffer.
+     */
+    push(message: SubscriptionMessage): void;
+    /**
+     * Process an `rpc.ack` for this subscription. Acknowledges all events up
+     * to and including the given cursor, then flushes buffered events into the
+     * newly opened window slots.
+     */
+    ack(cursor: string): void;
+    /**
+     * Returns the number of events currently in flight (sent but unacknowledged).
+     */
+    get inFlightCount(): number;
+    /**
+     * Returns the number of events currently buffered (waiting to be sent).
+     */
+    get bufferCount(): number;
+    /**
+     * Sends a single message over the wire and tracks its cursor.
+     */
+    private sendMessage;
+}
+//# sourceMappingURL=flow-controller.d.ts.map

package/dist/esm/src/connection/flow-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-controller.d.ts","sourceRoot":"","sources":["../../../../src/connection/flow-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAM5E,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,kFAAkF;AAClF,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC;;;;;;;;;GASG;AACH,qBAAa,cAAc;IAWvB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAb7B,uFAAuF;IACvF,OAAO,CAAC,OAAO,CAAgB;IAE/B,iEAAiE;IACjE,OAAO,CAAC,MAAM,CAA6B;IAE3C,8DAA8D;IAC9D,OAAO,CAAC,MAAM,CAAS;gBAGJ,cAAc,EAAE,SAAS,EACzB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,CAAC,QAAQ,EAAE,sBAAsB,KAAK,IAAI,EAChD,UAAU,EAAE,MAAM,IAAI;IAGzC;;;OAGG;IACI,IAAI,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI;IAuB/C;;;;OAIG;IACI,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAsBhC;;OAEG;IACH,IAAW,aAAa,IAAI,MAAM,CAEjC;IAED;;OAEG;IACH,IAAW,WAAW,IAAI,MAAM,CAE/B;IAED;;OAEG;IACH,OAAO,CAAC,WAAW;CAKpB"}