@enbox/dwn-server 0.0.3 → 0.0.5

package/dist/esm/src/json-rpc-handlers/dwn/process-message.js

@@ -1,7 +1,9 @@
 import { DwnInterfaceName, DwnMethodName } from '@enbox/dwn-sdk-js';
 import log from 'loglevel';
 import { v4 as uuidv4 } from 'uuid';
-import { createJsonRpcErrorResponse, createJsonRpcSuccessResponse, JsonRpcErrorCodes, } from '../../lib/json-rpc.js';
+import { DwnServerErrorCode } from '../../dwn-error.js';
+import { requestDataBytesTotal } from '../../metrics.js';
+import { createJsonRpcErrorResponse, createJsonRpcSuccessResponse, JsonRpcErrorCodes, } from '@enbox/dwn-clients';
 export const handleDwnProcessMessage = async (dwnRequest, context) => {
     const { dwn, dataStream, subscriptionRequest, socketConnection, transport } = context;
     const { target, message } = dwnRequest.params;
@@ -32,6 +34,25 @@ export const handleDwnProcessMessage = async (dwnRequest, context) => {
             const jsonRpcResponse = createJsonRpcErrorResponse(requestId, JsonRpcErrorCodes.InvalidParams, `the subscribe id: ${subscriptionRequest.id} is in use by an active subscription`);
             return { jsonRpcResponse };
         }
+        // --- Per-tenant rate limiting (before any DWN processing) ---
+        if (context.tenantRateLimiter) {
+            const result = context.tenantRateLimiter.consume(target);
+            if (result.allowed === false) {
+                const retryAfterSec = Math.ceil(result.retryAfterMs / 1000);
+                const jsonRpcResponse = createJsonRpcErrorResponse(requestId, JsonRpcErrorCodes.TooManyRequests, `${DwnServerErrorCode.RateLimitExceeded}: tenant rate limit exceeded, retry after ${retryAfterSec}s`, { retryAfterSec });
+                return { jsonRpcResponse };
+            }
+        }
+        // --- Per-tenant storage quota enforcement (RecordsWrite only) ---
+        if (context.config &&
+            context.adminStore &&
+            message.descriptor.interface === DwnInterfaceName.Records &&
+            message.descriptor.method === DwnMethodName.Write) {
+            const quotaResult = await enforceQuota(target, message, context);
+            if (quotaResult !== undefined) {
+                return quotaResult;
+            }
+        }
         const reply = await dwn.processMessage(target, message, {
             dataStream,
             subscriptionHandler: subscriptionRequest?.subscriptionHandler,
@@ -61,13 +82,94 @@ export const handleDwnProcessMessage = async (dwnRequest, context) => {
         if (recordDataStream) {
             responsePayload.dataStream = recordDataStream;
         }
+        // --- Fire-and-forget: post-processing hooks ---
+        const statusCode = reply.status?.code ?? 0;
+        if (context.messageProcessedHooks) {
+            const hookContext = { tenant: target, message, status: reply.status, transport };
+            for (const hook of context.messageProcessedHooks) {
+                try {
+                    const result = hook.onMessageProcessed(hookContext);
+                    if (result instanceof Promise) {
+                        result.catch((err) => {
+                            log.error('MessageProcessedHook error', err);
+                        });
+                    }
+                }
+                catch (err) {
+                    log.error('MessageProcessedHook error', err);
+                }
+            }
+        }
+        // Capture activity event and per-request metrics.
+        const dwnInterface = message.descriptor.interface;
+        const dwnMethod = message.descriptor.method;
+        const dataSizeBytes = message.descriptor.dataSize;
+        if (dataSizeBytes !== undefined && dataSizeBytes > 0) {
+            requestDataBytesTotal.inc({ interface: dwnInterface, method: dwnMethod }, dataSizeBytes);
+        }
+        if (context.activityLog) {
+            context.activityLog.record({
+                tenant: target,
+                interface: dwnInterface,
+                method: dwnMethod,
+                statusCode,
+                transport,
+                dataSizeBytes,
+            });
+        }
         return responsePayload;
     }
     catch (error) {
-        const jsonRpcResponse = createJsonRpcErrorResponse(requestId, JsonRpcErrorCodes.InternalError, error.message);
-        // log the unhandled error response
-        log.error('handleDwnProcessMessage error', jsonRpcResponse, dwnRequest, error);
+        // Log the full error internally but return a generic message to the client
+        // to avoid leaking implementation details (SQL errors, file paths, etc.).
+        log.error('handleDwnProcessMessage error', error);
+        const jsonRpcResponse = createJsonRpcErrorResponse(requestId, JsonRpcErrorCodes.InternalError, 'an unexpected error occurred while processing the message');
         return { jsonRpcResponse };
     }
 };
+// ---------------------------------------------------------------------------
+// Quota enforcement helper
+// ---------------------------------------------------------------------------
+/**
+ * Checks whether the tenant has exceeded their message count or storage quota.
+ * Returns a JSON-RPC error response if the quota is exceeded, or `undefined` to proceed.
+ */
+async function enforceQuota(target, message, context) {
+    const { config, adminStore, registrationStore } = context;
+    const requestId = message.recordId ?? uuidv4();
+    // Resolve effective quota: per-tenant override > global config > unlimited.
+    let maxMessages = config.quotaMaxMessages ?? 0;
+    let maxStorageBytes = config.quotaMaxStorageBytes ?? 0;
+    if (registrationStore) {
+        const tenantQuota = await registrationStore.getQuota(target);
+        if (tenantQuota !== undefined) {
+            maxMessages = tenantQuota.maxMessages ?? maxMessages;
+            maxStorageBytes = tenantQuota.maxStorageBytes ?? maxStorageBytes;
+        }
+    }
+    // 0 means unlimited — skip enforcement.
+    if (maxMessages === 0 && maxStorageBytes === 0) {
+        return undefined;
+    }
+    // Check message count quota.
+    if (maxMessages > 0) {
+        const currentMessages = await adminStore.getTenantMessageCount(target);
+        if (currentMessages >= maxMessages) {
+            return {
+                jsonRpcResponse: createJsonRpcErrorResponse(requestId, JsonRpcErrorCodes.InvalidRequest, `${DwnServerErrorCode.TenantMessageQuotaExceeded}: tenant has reached the message limit of ${maxMessages}`),
+            };
+        }
+    }
+    // Check storage size quota.
+    if (maxStorageBytes > 0) {
+        const dataSize = message.descriptor.dataSize ?? 0;
+        const currentStorage = await adminStore.getTenantStorageSize(target);
+        if (currentStorage + dataSize > maxStorageBytes) {
+            return {
+                jsonRpcResponse: createJsonRpcErrorResponse(requestId, JsonRpcErrorCodes.InvalidRequest, `${DwnServerErrorCode.TenantStorageQuotaExceeded}: tenant would exceed storage limit of ${maxStorageBytes} bytes`),
+            };
+        }
+    }
+    return undefined;
+}
 //# sourceMappingURL=process-message.js.map

package/dist/esm/src/json-rpc-handlers/dwn/process-message.js.map

@@ -1 +1 @@
-{"version":3,"file":"process-message.js","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/dwn/process-message.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEpE,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAQpC,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAG/B,MAAM,CAAC,MAAM,uBAAuB,GAAmB,KAAK,EAC1D,UAAU,EACV,OAAO,EACP,EAAE;IACF,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACtF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,MAAqD,CAAC;IAC7F,MAAM,SAAS,GAAG,UAAU,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;IAE5C,IAAI,CAAC;QACH,iFAAiF;QACjF,qDAAqD;QACrD,IACE,SAAS,KAAK,MAAM;YACpB,OAAO,CAAC,UAAU,CAAC,SAAS,KAAK,gBAAgB,CAAC,OAAO;YACzD,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,aAAa,CAAC,KAAK,EACjD,CAAC;YACD,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EACT,iBAAiB,CAAC,aAAa,EAC/B,qCAAqC,OAAO,CAAC,SAAS,EAAE,CACzD,CAAC;YACF,OAAO,EAAE,eAAe,EAAE,CAAC;QAC7B,CAAC;QAED,iEAAiE;QACjE,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,aAAa,CAAC,SAAS,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC/F,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EACT,iBAAiB,CAAC,cAAc,EAChC,8DAA8D,CAC/D,CAAC;YACF,OAAO,EAAE,eAAe,EAAE,CAAC;QAC7B,CAAC;QAED,4DAA4D;QAC5D,IAAI,SAAS,KAAK,IAAI,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC5D,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EACT,iBAAiB,CAAC,aAAa,EAC/B,uCAAuC,OAAO,CAAC,SAAS,EAAE,CAC3D,CAAC;YACF,OAAO,EAAE,eAAe,EAAE,CAAC;QAC7B,CAAC;QAED,sGAAsG;QACtG,gJAAgJ;QAChJ,6IAA6I;QAC7I,IAAI,mBAAmB,KAAK,SAAS,IAAI,gBAAgB,EAAE,eAAe,CAAC,mBAAmB,CAAC,EAAE,CAAC,EAAE,CAAC;YACnG,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EACT,iBAAiB,CAAC,aAAa,EAC/B,qBAAqB,mBAAmB,CAAC,EAAE,sCAAsC,CAClF,CAAC;YACF,OAAO,EAAE,eAAe,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE;YACtD,UAAU;YACV,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB;SAC9D,CAAC,CAAC;QAGH,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QACxB,+GAA+G;QAC/G,iIAAiI;QACjI,IAAI,gBAA4C,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpD,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC;YAC9B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,4BAA4B;QACvD,CAAC;QAED,IAAI,mBAAmB,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC;YACrC,oFAAoF;YACpF,mGAAmG;YACnG,uDAAuD;YACvD,MAAM,iBAAiB,GAAwB;gBAC7C,EAAE,EAAE,mBAAmB,CAAC,EAAE;gBAC1B,KAAK;aACN,CAAC;YACF,MAAM,gBAAgB,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;YAC1D,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,iGAAiG;QACpI,CAAC;QAED,MAAM,eAAe,GAAG,4BAA4B,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAoB,EAAE,eAAe,EAAE,CAAC;QAC7D,IAAI,gBAAgB,EAAE,CAAC;YACrB,eAAe,CAAC,UAAU,GAAG,gBAAgB,CAAC;QAChD,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EACT,iBAAiB,CAAC,aAAa,EAC/B,KAAK,CAAC,OAAO,CACd,CAAC;QAEF,mCAAmC;QACnC,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/E,OAAO,EAAE,eAAe,EAAqB,CAAC;IAChD,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"file":"process-message.js","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/dwn/process-message.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEpE,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAQpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAG5B,MAAM,CAAC,MAAM,uBAAuB,GAAmB,KAAK,EAC1D,UAAU,EACV,OAAO,EACP,EAAE;IACF,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACtF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,MAAqD,CAAC;IAC7F,MAAM,SAAS,GAAG,UAAU,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;IAE5C,IAAI,CAAC;QACH,iFAAiF;QACjF,qDAAqD;QACrD,IACE,SAAS,KAAK,MAAM;YACpB,OAAO,CAAC,UAAU,CAAC,SAAS,KAAK,gBAAgB,CAAC,OAAO;YACzD,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,aAAa,CAAC,KAAK,EACjD,CAAC;YACD,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EACT,iBAAiB,CAAC,aAAa,EAC/B,qCAAqC,OAAO,CAAC,SAAS,EAAE,CACzD,CAAC;YACF,OAAO,EAAE,eAAe,EAAE,CAAC;QAC7B,CAAC;QAED,iEAAiE;QACjE,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,aAAa,CAAC,SAAS,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC/F,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EACT,iBAAiB,CAAC,cAAc,EAChC,8DAA8D,CAC/D,CAAC;YACF,OAAO,EAAE,eAAe,EAAE,CAAC;QAC7B,CAAC;QAED,4DAA4D;QAC5D,IAAI,SAAS,KAAK,IAAI,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC5D,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EACT,iBAAiB,CAAC,aAAa,EAC/B,uCAAuC,OAAO,CAAC,SAAS,EAAE,CAC3D,CAAC;YACF,OAAO,EAAE,eAAe,EAAE,CAAC;QAC7B,CAAC;QAED,sGAAsG;QACtG,gJAAgJ;QAChJ,6IAA6I;QAC7I,IAAI,mBAAmB,KAAK,SAAS,IAAI,gBAAgB,EAAE,eAAe,CAAC,mBAAmB,CAAC,EAAE,CAAC,EAAE,CAAC;YACnG,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EACT,iBAAiB,CAAC,aAAa,EAC/B,qBAAqB,mBAAmB,CAAC,EAAE,sCAAsC,CAClF,CAAC;YACF,OAAO,EAAE,eAAe,EAAE,CAAC;QAC7B,CAAC;QAED,+DAA+D;QAC/D,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;gBAC5D,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EACT,iBAAiB,CAAC,eAAe,EACjC,GAAG,kBAAkB,CAAC,iBAAiB,6CAA6C,aAAa,GAAG,EACpG,EAAE,aAAa,EAAE,CAClB,CAAC;gBACF,OAAO,EAAE,eAAe,EAAE,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,IACE,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,UAAU;YAClB,OAAO,CAAC,UAAU,CAAC,SAAS,KAAK,gBAAgB,CAAC,OAAO;YACzD,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,aAAa,CAAC,KAAK,EACjD,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACjE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,WAAW,CAAC;YACrB,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE;YACtD,UAAU;YACV,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB;SAC9D,CAAC,CAAC;QAGH,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QACxB,+GAA+G;QAC/G,iIAAiI;QACjI,IAAI,gBAA4C,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpD,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC;YAC9B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,4BAA4B;QACvD,CAAC;QAED,IAAI,mBAAmB,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC;YACrC,oFAAoF;YACpF,mGAAmG;YACnG,uDAAuD;YACvD,MAAM,iBAAiB,GAAwB;gBAC7C,EAAE,EAAE,mBAAmB,CAAC,EAAE;gBAC1B,KAAK;aACN,CAAC;YACF,MAAM,gBAAgB,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;YAC1D,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,iGAAiG;QACpI,CAAC;QAED,MAAM,eAAe,GAAG,4BAA4B,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAoB,EAAE,eAAe,EAAE,CAAC;QAC7D,IAAI,gBAAgB,EAAE,CAAC;YACrB,eAAe,CAAC,UAAU,GAAG,gBAAgB,CAAC;QAChD,CAAC;QAED,iDAAiD;QACjD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;YACjF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;gBACjD,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;oBACpD,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;wBAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,GAAY,EAAQ,EAAE;4BAClC,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;wBAC/C,CAAC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,SAAmB,CAAC;QAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,MAAgB,CAAC;QACtD,MAAM,aAAa,GAAI,OAAO,CAAC,UAAoC,CAAC,QAAQ,CAAC;QAE7E,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACrD,qBAAqB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC;gBACzB,MAAM,EAAM,MAAM;gBAClB,SAAS,EAAG,YAAY;gBACxB,MAAM,EAAM,SAAS;gBACrB,UAAU;gBACV,SAAS;gBACT,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,0EAA0E;QAC1E,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QAElD,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EACT,iBAAiB,CAAC,aAAa,EAC/B,2DAA2D,CAC5D,CAAC;QAEF,OAAO,EAAE,eAAe,EAAqB,CAAC;IAChD,CAAC;AACH,CAAC,CAAC;AAEF,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E;;;GAGG;AACH,KAAK,UAAU,YAAY,CACzB,MAAc,EACd,OAAuB,EACvB,OAAsC;IAEtC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC;IAC1D,MAAM,SAAS,GAAI,OAAe,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;IAExD,4EAA4E;IAC5E,IAAI,WAAW,GAAG,MAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAChD,IAAI,eAAe,GAAG,MAAO,CAAC,oBAAoB,IAAI,CAAC,CAAC;IAExD,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,WAAW,GAAG,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC;YACrD,eAAe,GAAG,WAAW,CAAC,eAAe,IAAI,eAAe,CAAC;QACnE,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,IAAI,WAAW,KAAK,CAAC,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,6BAA6B;IAC7B,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,eAAe,GAAG,MAAM,UAAW,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,eAAe,IAAI,WAAW,EAAE,CAAC;YACnC,OAAO;gBACL,eAAe,EAAE,0BAA0B,CACzC,SAAS,EACT,iBAAiB,CAAC,cAAc,EAChC,GAAG,kBAAkB,CAAC,0BAA0B,6CAA6C,WAAW,EAAE,CAC3G;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAI,OAAO,CAAC,UAAoC,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC7E,MAAM,cAAc,GAAG,MAAM,UAAW,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,cAAc,GAAG,QAAQ,GAAG,eAAe,EAAE,CAAC;YAChD,OAAO;gBACL,eAAe,EAAE,0BAA0B,CACzC,SAAS,EACT,iBAAiB,CAAC,cAAc,EAChC,GAAG,kBAAkB,CAAC,0BAA0B,0CAA0C,eAAe,QAAQ,CAClH;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/esm/src/json-rpc-handlers/subscription/ack.d.ts

@@ -0,0 +1,20 @@
+import type { JsonRpcHandler } from '../../lib/json-rpc-router.js';
+/**
+ * Handles `rpc.ack` — acknowledges receipt of subscription events up to the
+ * given cursor, advancing the per-subscription flow-control window.
+ *
+ * Request shape:
+ * ```json
+ * {
+ *   "jsonrpc": "2.0",
+ *   "method": "rpc.ack",
+ *   "params": { "cursor": "<opaque-cursor>" },
+ *   "subscription": { "id": "<subscription-id>" }
+ * }
+ * ```
+ *
+ * This is a notification (no `id` required), but the server sends a response
+ * if validation fails (missing params, unknown subscription, etc.).
+ */
+export declare const handleSubscriptionAck: JsonRpcHandler;
+//# sourceMappingURL=ack.d.ts.map

package/dist/esm/src/json-rpc-handlers/subscription/ack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ack.d.ts","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/subscription/ack.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAEV,cAAc,EACf,MAAM,8BAA8B,CAAC;AAItC;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,qBAAqB,EAAE,cAmCnC,CAAC"}

package/dist/esm/src/json-rpc-handlers/subscription/ack.js

@@ -0,0 +1,41 @@
+import { v4 as uuidv4 } from 'uuid';
+import { createJsonRpcErrorResponse, createJsonRpcSuccessResponse, JsonRpcErrorCodes } from '@enbox/dwn-clients';
+/**
+ * Handles `rpc.ack` — acknowledges receipt of subscription events up to the
+ * given cursor, advancing the per-subscription flow-control window.
+ *
+ * Request shape:
+ * ```json
+ * {
+ *   "jsonrpc": "2.0",
+ *   "method": "rpc.ack",
+ *   "params": { "cursor": "<opaque-cursor>" },
+ *   "subscription": { "id": "<subscription-id>" }
+ * }
+ * ```
+ *
+ * This is a notification (no `id` required), but the server sends a response
+ * if validation fails (missing params, unknown subscription, etc.).
+ */
+export const handleSubscriptionAck = async (jsonRpcRequest, context) => {
+    const requestId = jsonRpcRequest.id ?? uuidv4();
+    if (context.socketConnection === undefined) {
+        const jsonRpcResponse = createJsonRpcErrorResponse(requestId, JsonRpcErrorCodes.InvalidRequest, 'socket connection does not exist');
+        return { jsonRpcResponse };
+    }
+    if (jsonRpcRequest.subscription === undefined) {
+        const jsonRpcResponse = createJsonRpcErrorResponse(requestId, JsonRpcErrorCodes.InvalidParams, 'subscription options are required');
+        return { jsonRpcResponse };
+    }
+    const { id: subscriptionId } = jsonRpcRequest.subscription;
+    const { cursor } = (jsonRpcRequest.params ?? {});
+    if (cursor === undefined || typeof cursor !== 'string' || cursor === '') {
+        const jsonRpcResponse = createJsonRpcErrorResponse(requestId, JsonRpcErrorCodes.InvalidParams, 'params.cursor is required and must be a non-empty string');
+        return { jsonRpcResponse };
+    }
+    const { socketConnection } = context;
+    socketConnection.ackSubscription(subscriptionId, cursor);
+    const jsonRpcResponse = createJsonRpcSuccessResponse(requestId, { reply: { status: 200, detail: 'OK' } });
+    return { jsonRpcResponse };
+};
+//# sourceMappingURL=ack.js.map

package/dist/esm/src/json-rpc-handlers/subscription/ack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ack.js","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/subscription/ack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAQpC,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEjH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAmB,KAAK,EACxD,cAAc,EACd,OAAO,EACP,EAAE;IACF,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;IAEhD,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EAAE,iBAAiB,CAAC,cAAc,EAAE,kCAAkC,CAChF,CAAC;QACF,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,cAAc,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EAAE,iBAAiB,CAAC,aAAa,EAAE,mCAAmC,CAChF,CAAC;QACF,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,cAAc,CAAC,YAAiC,CAAC;IAChF,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,MAAM,IAAI,EAAE,CAAwB,CAAC;IAExE,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QACxE,MAAM,eAAe,GAAG,0BAA0B,CAChD,SAAS,EAAE,iBAAiB,CAAC,aAAa,EAAE,0DAA0D,CACvG,CAAC;QACF,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;IACrC,gBAAgB,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAEzD,MAAM,eAAe,GAAG,4BAA4B,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1G,OAAO,EAAE,eAAe,EAAqB,CAAC;AAChD,CAAC,CAAC"}

package/dist/esm/src/json-rpc-handlers/subscription/close.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"close.d.ts","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/subscription/close.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,cAAc,EACf,MAAM,8BAA8B,CAAC;AAUtC;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,cAoCtC,CAAC"}
+{"version":3,"file":"close.d.ts","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/subscription/close.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,cAAc,EACf,MAAM,8BAA8B,CAAC;AAMtC;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,cAoCtC,CAAC"}

package/dist/esm/src/json-rpc-handlers/subscription/close.js

@@ -1,6 +1,6 @@
 import { v4 as uuidv4 } from 'uuid';
 import { DwnServerErrorCode } from '../../dwn-error.js';
-import { createJsonRpcErrorResponse, createJsonRpcSuccessResponse, JsonRpcErrorCodes, } from '../../lib/json-rpc.js';
+import { createJsonRpcErrorResponse, createJsonRpcSuccessResponse, JsonRpcErrorCodes } from '@enbox/dwn-clients';
 /**
  * Closes a subscription tied to a specific `SocketConnection`.
  *

package/dist/esm/src/json-rpc-handlers/subscription/close.js.map

@@ -1 +1 @@
-{"version":3,"file":"close.js","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/subscription/close.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAQpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAE/B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmB,KAAK,EAC3D,cAAc,EACd,OAAO,EACP,EAAE;IACF,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;IAChD,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,eAAe,GAAG,0BAA0B,CAAC,SAAS,EAAE,iBAAiB,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAC;QACpI,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,cAAc,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,eAAe,GAAG,0BAA0B,CAAC,SAAS,EAAE,iBAAiB,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;QAClI,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;IACrC,MAAM,EAAE,EAAE,EAAE,GAAG,cAAc,CAAC,YAAiC,CAAC;IAEhE,IAAI,eAA+B,CAAC;IACpC,IAAI,CAAC;QACH,sFAAsF;QACtF,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC7C,eAAe,GAAG,4BAA4B,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC5G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,uCAAuC,EAAE,CAAC;YAC9E,eAAe,GAAG,0BAA0B,CAAC,SAAS,EAAE,iBAAiB,CAAC,aAAa,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QACjI,CAAC;aAAM,CAAC;YACN,eAAe,GAAG,0BAA0B,CAC1C,SAAS,EACT,iBAAiB,CAAC,aAAa,EAC/B,wCAAwC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,eAAe,EAAqB,CAAC;AAChD,CAAC,CAAC"}
+{"version":3,"file":"close.js","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/subscription/close.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAQpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEjH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAmB,KAAK,EAC3D,cAAc,EACd,OAAO,EACP,EAAE;IACF,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC;IAChD,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,eAAe,GAAG,0BAA0B,CAAC,SAAS,EAAE,iBAAiB,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAC;QACpI,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,cAAc,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,eAAe,GAAG,0BAA0B,CAAC,SAAS,EAAE,iBAAiB,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;QAClI,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;IACrC,MAAM,EAAE,EAAE,EAAE,GAAG,cAAc,CAAC,YAAiC,CAAC;IAEhE,IAAI,eAA+B,CAAC;IACpC,IAAI,CAAC;QACH,sFAAsF;QACtF,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC7C,eAAe,GAAG,4BAA4B,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC5G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,uCAAuC,EAAE,CAAC;YAC9E,eAAe,GAAG,0BAA0B,CAAC,SAAS,EAAE,iBAAiB,CAAC,aAAa,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QACjI,CAAC;aAAM,CAAC;YACN,eAAe,GAAG,0BAA0B,CAC1C,SAAS,EACT,iBAAiB,CAAC,aAAa,EAC/B,wCAAwC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,eAAe,EAAqB,CAAC;AAChD,CAAC,CAAC"}

package/dist/esm/src/json-rpc-handlers/subscription/index.d.ts

@@ -1,2 +1,3 @@
+export * from './ack.js';
 export * from './close.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/src/json-rpc-handlers/subscription/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/subscription/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/subscription/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC"}

package/dist/esm/src/json-rpc-handlers/subscription/index.js

@@ -1,2 +1,3 @@
+export * from './ack.js';
 export * from './close.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/src/json-rpc-handlers/subscription/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/subscription/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/json-rpc-handlers/subscription/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC"}

package/dist/esm/src/lib/json-rpc-router.d.ts

@@ -1,6 +1,12 @@
-import type { Dwn, MessageSubscriptionHandler } from '@enbox/dwn-sdk-js';
-import type { JsonRpcId, JsonRpcRequest, JsonRpcResponse } from './json-rpc.js';
+import type { ActivityLog } from '../admin/activity-log.js';
+import type { AdminStore } from '../admin/admin-store.js';
+import type { DwnServerConfig } from '../config.js';
+import type { MessageProcessedHook } from '../message-processed-hook.js';
+import type { RateLimiter } from '../rate-limiter.js';
+import type { RegistrationStore } from '../registration/registration-store.js';
 import type { SocketConnection } from '../connection/socket-connection.js';
+import type { Dwn, SubscriptionListener } from '@enbox/dwn-sdk-js';
+import type { JsonRpcId, JsonRpcRequest, JsonRpcResponse } from '@enbox/dwn-clients';
 export type RequestContext = {
     transport: 'http' | 'ws';
     dwn: Dwn;
@@ -9,11 +15,23 @@ export type RequestContext = {
     subscriptionRequest?: {
         /** The JsonRpcId of the subscription handler */
         id: JsonRpcId;
-        /** The `MessageEvent` handler associated with a subscription request, only used in `ws` requests */
-        subscriptionHandler: MessageSubscriptionHandler;
+        /** The `SubscriptionMessage` handler associated with a subscription request, only used in `ws` requests */
+        subscriptionHandler: SubscriptionListener;
     };
     /** The `ReadableStream` associated with a `RecordsWrite` request only used in `http` requests */
     dataStream?: ReadableStream<Uint8Array>;
+    /** The admin activity log for capturing DWN request events (optional). */
+    activityLog?: ActivityLog;
+    /** The admin store for quota usage queries (optional). */
+    adminStore?: AdminStore;
+    /** The registration store for per-tenant quota lookups (optional). */
+    registrationStore?: RegistrationStore;
+    /** Server configuration for global quota/rate-limit defaults (optional). */
+    config?: DwnServerConfig;
+    /** Per-tenant rate limiter (optional). */
+    tenantRateLimiter?: RateLimiter;
+    /** Hooks invoked after every `dwn.processMessage()` call (fire-and-forget). */
+    messageProcessedHooks?: MessageProcessedHook[];
 };
 export type HandlerResponse = {
     jsonRpcResponse: JsonRpcResponse;

package/dist/esm/src/lib/json-rpc-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json-rpc-router.d.ts","sourceRoot":"","sources":["../../../../src/lib/json-rpc-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAEzE,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,EAAE,GAAG,CAAC;IACT,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,mBAAmB,CAAC,EAAE;QACpB,gDAAgD;QAChD,EAAE,EAAE,SAAS,CAAC;QACd,oGAAoG;QACpG,mBAAmB,EAAE,0BAA0B,CAAC;KACjD,CAAA;IACD,iGAAiG;IACjG,UAAU,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,eAAe,EAAE,eAAe,CAAC;IACjC,UAAU,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,CAC3B,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,eAAe,CAAC,CAAC;AAE9B,qBAAa,aAAa;IACxB,OAAO,CAAC,cAAc,CAAuC;;IAM7D,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI;IAI/C,MAAM,CACV,UAAU,EAAE,cAAc,EAC1B,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC;CAK5B"}
+{"version":3,"file":"json-rpc-router.d.ts","sourceRoot":"","sources":["../../../../src/lib/json-rpc-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,KAAK,EAAE,GAAG,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErF,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,EAAE,GAAG,CAAC;IACT,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,mBAAmB,CAAC,EAAE;QACpB,gDAAgD;QAChD,EAAE,EAAE,SAAS,CAAC;QACd,2GAA2G;QAC3G,mBAAmB,EAAE,oBAAoB,CAAC;KAC3C,CAAA;IACD,iGAAiG;IACjG,UAAU,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACxC,0EAA0E;IAC1E,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,0DAA0D;IAC1D,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,4EAA4E;IAC5E,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,0CAA0C;IAC1C,iBAAiB,CAAC,EAAE,WAAW,CAAC;IAChC,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,oBAAoB,EAAE,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,eAAe,EAAE,eAAe,CAAC;IACjC,UAAU,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,CAC3B,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,eAAe,CAAC,CAAC;AAE9B,qBAAa,aAAa;IACxB,OAAO,CAAC,cAAc,CAAuC;;IAM7D,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI;IAI/C,MAAM,CACV,UAAU,EAAE,cAAc,EAC1B,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,eAAe,CAAC;CAK5B"}

package/dist/esm/src/lib/json-rpc-router.js.map

@@ -1 +1 @@
-{"version":3,"file":"json-rpc-router.js","sourceRoot":"","sources":["../../../../src/lib/json-rpc-router.ts"],"names":[],"mappings":"AA+BA,MAAM,OAAO,aAAa;IAChB,cAAc,CAAuC;IAE7D;QACE,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,EAAE,CAAC,UAAkB,EAAE,OAAuB;QAC5C,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CACV,UAA0B,EAC1B,OAAuB;QAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAEvD,OAAO,MAAM,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;CACF"}
+{"version":3,"file":"json-rpc-router.js","sourceRoot":"","sources":["../../../../src/lib/json-rpc-router.ts"],"names":[],"mappings":"AA+CA,MAAM,OAAO,aAAa;IAChB,cAAc,CAAuC;IAE7D;QACE,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,EAAE,CAAC,UAAkB,EAAE,OAAuB;QAC5C,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CACV,UAA0B,EAC1B,OAAuB;QAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAEvD,OAAO,MAAM,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/esm/src/lib/sql-utils.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Escapes SQL LIKE wildcard characters (`%`, `_`, `\`) in user-supplied input
+ * so that they are treated as literal characters rather than pattern operators.
+ */
+export declare function escapeLikeWildcards(input: string): string;
+//# sourceMappingURL=sql-utils.d.ts.map

package/dist/esm/src/lib/sql-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-utils.d.ts","sourceRoot":"","sources":["../../../../src/lib/sql-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzD"}

package/dist/esm/src/lib/sql-utils.js

@@ -0,0 +1,8 @@
+/**
+ * Escapes SQL LIKE wildcard characters (`%`, `_`, `\`) in user-supplied input
+ * so that they are treated as literal characters rather than pattern operators.
+ */
+export function escapeLikeWildcards(input) {
+    return input.replace(/[%_\\]/g, '\\$&');
+}
+//# sourceMappingURL=sql-utils.js.map

package/dist/esm/src/lib/sql-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-utils.js","sourceRoot":"","sources":["../../../../src/lib/sql-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC"}

package/dist/esm/src/main.js

@@ -1,11 +1,5 @@
 #!/usr/bin/env node
-// node.js 18 and earlier, needs globalThis.crypto polyfill. needed for dwn-sdk-js
-import { webcrypto } from 'node:crypto';
 import { DwnServer } from './dwn-server.js';
-if (!globalThis.crypto) {
-    // @ts-ignore
-    globalThis.crypto = webcrypto;
-}
 const dwnServer = new DwnServer();
 await dwnServer.start();
 //# sourceMappingURL=main.js.map

package/dist/esm/src/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/main.ts"],"names":[],"mappings":";AACA,kFAAkF;AAClF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;IACvB,aAAa;IACb,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC;AAChC,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;AAElC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;AAElC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC"}

package/dist/esm/src/message-processed-hook.d.ts

@@ -0,0 +1,35 @@
+import type { GenericMessage } from '@enbox/dwn-sdk-js';
+/**
+ * Context provided to hooks after `dwn.processMessage()` returns.
+ */
+export type MessageProcessedContext = {
+    /** The tenant DID that owns the DWN. */
+    tenant: string;
+    /** The original signed DWN message. */
+    message: GenericMessage;
+    /** The reply status from the DWN engine. */
+    status: {
+        code: number;
+        detail: string;
+    };
+    /** The transport over which the message was received. */
+    transport: 'http' | 'ws';
+};
+/**
+ * Hook that is invoked after every successful `dwn.processMessage()` call.
+ *
+ * Hooks are fire-and-forget: they run asynchronously and their return values
+ * are ignored. Errors thrown by hooks are logged but never propagate to the
+ * request handler or the client.
+ *
+ * Implementations should return quickly and schedule any expensive work
+ * (network I/O, retries) internally.
+ */
+export interface MessageProcessedHook {
+    /**
+     * Called after a DWN message has been processed.
+     * May return void or a Promise — both are handled gracefully.
+     */
+    onMessageProcessed(context: MessageProcessedContext): void | Promise<void>;
+}
+//# sourceMappingURL=message-processed-hook.d.ts.map

package/dist/esm/src/message-processed-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-processed-hook.d.ts","sourceRoot":"","sources":["../../../src/message-processed-hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,OAAO,EAAE,cAAc,CAAC;IACxB,4CAA4C;IAC5C,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,yDAAyD;IACzD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5E"}

package/dist/esm/src/message-processed-hook.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=message-processed-hook.js.map

package/dist/esm/src/message-processed-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-processed-hook.js","sourceRoot":"","sources":["../../../src/message-processed-hook.ts"],"names":[],"mappings":""}

package/dist/esm/src/metrics.d.ts

@@ -1,4 +1,16 @@
-import { Counter, Histogram } from 'prom-client';
+import { Counter, Gauge, Histogram } from 'prom-client';
 export declare const requestCounter: Counter<"method" | "status" | "error">;
 export declare const responseHistogram: Histogram<"route" | "code">;
+/** Number of active (registered) tenants. */
+export declare const activeTenants: Gauge<string>;
+/** Total messages stored across all tenants. */
+export declare const totalMessages: Gauge<string>;
+/** Total data storage in bytes across all tenants. */
+export declare const totalDataBytes: Gauge<string>;
+/** Number of active WebSocket connections. */
+export declare const websocketConnections: Gauge<string>;
+/** Number of active WebSocket subscriptions. */
+export declare const websocketSubscriptions: Gauge<string>;
+/** Total data bytes written via RecordsWrite, labeled by interface + method. */
+export declare const requestDataBytesTotal: Counter<"interface" | "method">;
 //# sourceMappingURL=metrics.d.ts.map

package/dist/esm/src/metrics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../../src/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEjD,eAAO,MAAM,cAAc,wCAIzB,CAAC;AAEH,eAAO,MAAM,iBAAiB,6BAK5B,CAAC"}
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../../src/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAMxD,eAAO,MAAM,cAAc,wCAIzB,CAAC;AAEH,eAAO,MAAM,iBAAiB,6BAK5B,CAAC;AAMH,6CAA6C;AAC7C,eAAO,MAAM,aAAa,eAGxB,CAAC;AAEH,gDAAgD;AAChD,eAAO,MAAM,aAAa,eAGxB,CAAC;AAEH,sDAAsD;AACtD,eAAO,MAAM,cAAc,eAGzB,CAAC;AAEH,8CAA8C;AAC9C,eAAO,MAAM,oBAAoB,eAG/B,CAAC;AAEH,gDAAgD;AAChD,eAAO,MAAM,sBAAsB,eAGjC,CAAC;AAMH,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,iCAIhC,CAAC"}

package/dist/esm/src/metrics.js

@@ -1,4 +1,7 @@
-import { Counter, Histogram } from 'prom-client';
+import { Counter, Gauge, Histogram } from 'prom-client';
+// ---------------------------------------------------------------------------
+// Existing metrics
+// ---------------------------------------------------------------------------
 export const requestCounter = new Counter({
     name: 'dwn_requests_total',
     help: 'all dwn requests processed',
@@ -10,4 +13,41 @@ export const responseHistogram = new Histogram({
     buckets: [0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10],
     labelNames: ['route', 'code'],
 });
+// ---------------------------------------------------------------------------
+// Enhanced gauges — updated periodically by AdminApi.startMetricsUpdater()
+// ---------------------------------------------------------------------------
+/** Number of active (registered) tenants. */
+export const activeTenants = new Gauge({
+    name: 'dwn_active_tenants',
+    help: 'number of active registered tenants',
+});
+/** Total messages stored across all tenants. */
+export const totalMessages = new Gauge({
+    name: 'dwn_total_messages',
+    help: 'total messages stored across all tenants',
+});
+/** Total data storage in bytes across all tenants. */
+export const totalDataBytes = new Gauge({
+    name: 'dwn_total_data_bytes',
+    help: 'total data storage bytes across all tenants',
+});
+/** Number of active WebSocket connections. */
+export const websocketConnections = new Gauge({
+    name: 'dwn_websocket_connections',
+    help: 'number of active websocket connections',
+});
+/** Number of active WebSocket subscriptions. */
+export const websocketSubscriptions = new Gauge({
+    name: 'dwn_websocket_subscriptions',
+    help: 'number of active websocket subscriptions',
+});
+// ---------------------------------------------------------------------------
+// Enhanced counters — incremented per-request
+// ---------------------------------------------------------------------------
+/** Total data bytes written via RecordsWrite, labeled by interface + method. */
+export const requestDataBytesTotal = new Counter({
+    name: 'dwn_request_data_bytes_total',
+    help: 'total data bytes processed in DWN requests',
+    labelNames: ['interface', 'method'],
+});
 //# sourceMappingURL=metrics.js.map

package/dist/esm/src/metrics.js.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../src/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC;IACxC,IAAI,EAAS,oBAAoB;IACjC,IAAI,EAAS,4BAA4B;IACzC,UAAU,EAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,SAAS,CAAC;IAC7C,IAAI,EAAS,eAAe;IAC5B,IAAI,EAAS,oBAAoB;IACjC,OAAO,EAAM,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACtE,UAAU,EAAG,CAAC,OAAO,EAAE,MAAM,CAAC;CAC/B,CAAC,CAAC"}
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../src/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExD,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC;IACxC,IAAI,EAAS,oBAAoB;IACjC,IAAI,EAAS,4BAA4B;IACzC,UAAU,EAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,SAAS,CAAC;IAC7C,IAAI,EAAS,eAAe;IAC5B,IAAI,EAAS,oBAAoB;IACjC,OAAO,EAAM,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACtE,UAAU,EAAG,CAAC,OAAO,EAAE,MAAM,CAAC;CAC/B,CAAC,CAAC;AAEH,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAE9E,6CAA6C;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,KAAK,CAAC;IACrC,IAAI,EAAG,oBAAoB;IAC3B,IAAI,EAAG,qCAAqC;CAC7C,CAAC,CAAC;AAEH,gDAAgD;AAChD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,KAAK,CAAC;IACrC,IAAI,EAAG,oBAAoB;IAC3B,IAAI,EAAG,0CAA0C;CAClD,CAAC,CAAC;AAEH,sDAAsD;AACtD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,KAAK,CAAC;IACtC,IAAI,EAAG,sBAAsB;IAC7B,IAAI,EAAG,6CAA6C;CACrD,CAAC,CAAC;AAEH,8CAA8C;AAC9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,KAAK,CAAC;IAC5C,IAAI,EAAG,2BAA2B;IAClC,IAAI,EAAG,wCAAwC;CAChD,CAAC,CAAC;AAEH,gDAAgD;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,KAAK,CAAC;IAC9C,IAAI,EAAG,6BAA6B;IACpC,IAAI,EAAG,0CAA0C;CAClD,CAAC,CAAC;AAEH,8EAA8E;AAC9E,8CAA8C;AAC9C,8EAA8E;AAE9E,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,OAAO,CAAC;IAC/C,IAAI,EAAS,8BAA8B;IAC3C,IAAI,EAAS,4CAA4C;IACzD,UAAU,EAAG,CAAC,WAAW,EAAE,QAAQ,CAAC;CACrC,CAAC,CAAC"}

package/dist/esm/src/plugins/event-log-nats.d.ts

@@ -0,0 +1,25 @@
+import type { EventLog, EventLogReadOptions, EventLogReadResult, EventLogSubscribeOptions, EventSubscription, KeyValues, MessageEvent, SubscriptionListener } from '@enbox/dwn-sdk-js';
+/**
+ * Distributed {@link EventLog} implementation backed by NATS JetStream.
+ *
+ * Events are published to per-tenant subjects within a single JetStream stream.
+ * NATS stream sequence numbers are used as opaque cursors, providing native
+ * cursor-based replay and EOSE detection via `msg.info.pending`.
+ *
+ * Designed for multi-node DWN deployments: node A can emit an event, and a
+ * subscriber connected to node B receives it via the shared NATS cluster.
+ *
+ * Loaded by the DWN server plugin system via `DWN_EVENT_LOG_PLUGIN_PATH`.
+ * Must be a default export with a no-arg constructor.
+ */
+export default class NatsEventLog implements EventLog {
+    #private;
+    constructor();
+    open(): Promise<void>;
+    close(): Promise<void>;
+    emit(tenant: string, event: MessageEvent, indexes: KeyValues): Promise<string>;
+    read(tenant: string, options?: EventLogReadOptions): Promise<EventLogReadResult>;
+    subscribe(tenant: string, id: string, listener: SubscriptionListener, options?: EventLogSubscribeOptions): Promise<EventSubscription>;
+    trim(tenant: string, olderThan: number | string): Promise<void>;
+}
+//# sourceMappingURL=event-log-nats.d.ts.map

package/dist/esm/src/plugins/event-log-nats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-log-nats.d.ts","sourceRoot":"","sources":["../../../../src/plugins/event-log-nats.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAiB,mBAAmB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,iBAAiB,EAAU,SAAS,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AA+I9M;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,OAAO,OAAO,YAAa,YAAW,QAAQ;;;IAetC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAuBtB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAW9E,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAoEpF,SAAS,CACpB,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,iBAAiB,CAAC;IA8GhB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CA2D7E"}