@kumiai/hub-server 0.10.0 → 0.10.2

package/README.md

@@ -16,6 +16,10 @@ client registry for push fan-out, and an in-memory `HubStore` for development an
   `DEFAULT_HUB_ACCESS_RULES`.
 - `HubStoreErrorEvent`, `HubStoreErrorHook` — the `onStoreError` event and hook types.
 
+`createHub` accepts `replay` with a cache and tuning (`maxAge`, `leeway`, `maxEntries`).
+The hub always enables replay checks and rejects stale tokens. Supply a persistent `replay.cache`
+to keep replay protection across restarts; omitted, it uses a per-process memory cache.
+
 ```ts
 import { createHub, createMemoryStore } from '@kumiai/hub-server'
 

package/lib/handlers.js

@@ -405,7 +405,8 @@ export function createHandlers(params) {
                             payload: toB64(message.payload)
                         })),
                     head: result.head,
-                    oldest: result.oldest
+                    oldest: result.oldest,
+                    gap: result.gap
                 };
             } catch (error) {
                 rethrowAsHandlerError(error);

package/lib/hub.d.ts

@@ -1,5 +1,5 @@
 import type { ServerTransportOf } from '@enkaku/protocol';
-import type { AccessRules, ResourceLimits, Server } from '@enkaku/server';
+import type { AccessRules, ReplayOptions, ResourceLimits, Server } from '@enkaku/server';
 import type { Identity } from '@kokuin/token';
 import type { HubProtocol, HubStore, WakeRegistry, WakeSender } from '@kumiai/hub-protocol';
 import { type AuthorizeHook, type HubRateLimits, type HubStoreErrorHook, type KeyPackageFetchLimits } from './handlers.js';
@@ -20,6 +20,8 @@ export type HubPurgeOptions = {
      */
     olderThan?: number;
 };
+/** Replay settings a host may tune. The hub always enables replay checks and rejects stale tokens. */
+export type HubReplayOptions = Omit<ReplayOptions, 'enabled' | 'rejectStale'>;
 export type CreateHubParams = {
     transport: ServerTransportOf<HubProtocol>;
     store: HubStore;
@@ -30,6 +32,8 @@ export type CreateHubParams = {
     identity: Identity;
     /** Access rules enforced by the server. Defaults to {@link DEFAULT_HUB_ACCESS_RULES}. */
     accessRules?: AccessRules;
+    /** Omitted: per-process memory cache. Only a persistent `cache` survives a hub restart. */
+    replay?: HubReplayOptions;
     /**
      * Per-action authorization hook. Consulted for publish, subscribe, topic/fetch, keypackage/*,
      * wake/*, and receive — the coarse `receive` gate at channel open plus a per-frame

package/lib/hub.js

@@ -56,6 +56,11 @@ export function createHub(params) {
         transport: params.transport,
         identity: params.identity,
         accessRules: params.accessRules ?? DEFAULT_HUB_ACCESS_RULES,
+        replay: {
+            ...params.replay,
+            enabled: true,
+            rejectStale: true
+        },
         limits
     });
     if (params.purge !== false) {

package/lib/index.d.ts

@@ -1,6 +1,6 @@
 export type { AuthorizeDecision, AuthorizeHook, AuthorizeRequest, CreateHandlersParams, HubRateLimits, HubStoreErrorEvent, HubStoreErrorHook, KeyPackageFetchLimits, } from './handlers.js';
 export { createHandlers, DEFAULT_KEYPACKAGE_FETCH_LIMITS, DEFAULT_RATE_LIMITS, DEFAULT_RECEIVE_BUFFER_LIMIT, } from './handlers.js';
-export type { CreateHubParams, HubInstance, HubPurgeOptions } from './hub.js';
+export type { CreateHubParams, HubInstance, HubPurgeOptions, HubReplayOptions } from './hub.js';
 export { createHub, DEFAULT_HUB_ACCESS_RULES } from './hub.js';
 export { createMemoryStore, type MemoryStoreOptions } from './memoryStore.js';
 export { createRateLimiter, type RateLimitConfig, type RateLimiter } from './rateLimit.js';

package/lib/memoryStore.js

@@ -54,6 +54,7 @@ function isLive(entry, nowSeconds) {
     const entries = new Map();
     const topicLogs = new Map();
     const heads = new Map();
+    const removedThrough = new Map();
     const deliveries = new Map();
     /**
    * publishID -> the sequenceID it was accepted as. Not a log entry and not reachable from one: no
@@ -87,6 +88,10 @@ function isLive(entry, nowSeconds) {
     function removeEntry(sequenceID) {
         const entry = entries.get(sequenceID);
         if (entry == null) return;
+        if (entry.retain === 'log') {
+            const removed = removedThrough.get(entry.topicID);
+            if (removed == null || sequenceID > removed) removedThrough.set(entry.topicID, sequenceID);
+        }
         for (const recipientDID of entry.pendingFor){
             const list = deliveries.get(recipientDID);
             if (list != null) {
@@ -295,7 +300,8 @@ function isLive(entry, nowSeconds) {
             return {
                 messages,
                 head: heads.get(params.topicID) ?? null,
-                oldest: log[0] ?? null
+                oldest: log[0] ?? null,
+                gap: removedThrough.has(params.topicID) && (after == null || removedThrough.get(params.topicID) > after)
             };
         },
         async trim (params) {
@@ -318,14 +324,17 @@ function isLive(entry, nowSeconds) {
             }
         },
         async purge (params) {
-            // The age bound, for both classes: the same removal path, the same invariants — head is
-            // untouched.
             const now = Date.now();
             const purgedIDs = [];
+            const retainedTopics = new Set();
+            // Insertion order is log-position order, even if the clock moves backwards.
             for (const [sequenceID, entry] of entries){
+                if (entry.retain === 'log' && retainedTopics.has(entry.topicID)) continue;
                 const retention = retentionOf(entry.topicID, params.olderThan);
                 if (entry.storedAt <= now - retention * 1000) {
                     purgedIDs.push(sequenceID);
+                } else if (entry.retain === 'log') {
+                    retainedTopics.add(entry.topicID);
                 }
             }
             for (const sequenceID of purgedIDs){

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kumiai/hub-server",
-  "version": "0.10.0",
+  "version": "0.10.2",
   "description": "Hub server for Enkaku E2EE group message routing",
   "keywords": [
     "hub",
@@ -25,18 +25,18 @@
     "lib/*"
   ],
   "dependencies": {
-    "@enkaku/protocol": "^0.21.1",
-    "@enkaku/server": "^0.21.2",
+    "@enkaku/protocol": "^0.21.4",
+    "@enkaku/server": "^0.21.3",
     "@kokuin/token": "^0.5.0",
-    "@kumiai/hub-protocol": "^0.10.0",
-    "@sozai/codec": "^0.4.0",
-    "@sozai/event": "^0.1.3",
-    "@sozai/log": "^0.3.1"
+    "@kumiai/hub-protocol": "^0.10.1",
+    "@sozai/codec": "^0.4.2",
+    "@sozai/event": "^0.1.5",
+    "@sozai/log": "^0.4.0"
   },
   "devDependencies": {
-    "@enkaku/client": "^0.21.2",
-    "@enkaku/transport": "^0.21.0",
-    "@kumiai/hub-conformance": "^0.10.0",
+    "@enkaku/client": "^0.21.3",
+    "@enkaku/transport": "^0.21.3",
+    "@kumiai/hub-conformance": "^0.10.1",
     "@kumiai/hub-wake": "^0.10.0"
   },
   "publishConfig": {