@kumiai/hub-server 0.11.0 → 0.12.0

package/README.md

@@ -84,6 +84,11 @@ request belongs to the store, because the store is what refuses the subscribe
 pin a topic's frames forever with `subscribe({ retention: 2 ** 31 })`. A subscribe above the ceiling
 is refused with `RetentionExceededError`, never clamped.
 
+When the store supports subscription reaping, each tick also removes inactive subscriptions after message purge settles.
+`purge.subscriptionOlderThan` sets the inactivity window in seconds, defaulting to `7776000` (90 days).
+The effective window is `Math.max(subscriptionOlderThan, olderThan)`, so subscriptions outlive the message retention window.
+Both operations report failures through `onStoreError` independently. Disposal waits for both operations.
+
 `createMemoryStore`'s `maxDepth` (default 1000) evicts the oldest **log** frames beyond that count.
 Mailbox frames on the same topic are not counted, so a member cannot evict the log with a mailbox
 flood.

package/lib/handlers.d.ts

@@ -98,6 +98,9 @@ export type AuthorizeHook = (req: AuthorizeRequest) => AuthorizeDecision | Promi
 export type HubStoreErrorEvent = {
     method: 'purge';
     error: unknown;
+} | {
+    method: 'purgeSubscriptions';
+    error: unknown;
 }
 /** The DID whose ack the store refused. */
  | {

package/lib/handlers.js

@@ -21,6 +21,7 @@ function normalizeAuthorizeDecision(decision) {
     fetchLastResortKeyPackage: 'The fetch returned what the pool could serve, without the last-resort top-up. A read that ' + 'keeps failing means the availability floor the last-resort slot exists to provide is absent, ' + 'and joins fail downstream at the inviter with no signal here.',
     ack: 'The frame stays pending and the client re-acks on the next round. An ack that keeps failing ' + 'redelivers every frame forever.',
     purge: 'Retried on the next interval. A purge that keeps failing means the store grows without bound.',
+    purgeSubscriptions: 'Retried on the next interval. Persistent failure leaves stale subscriptions consuming storage and quota.',
     getSubscribers: 'The frame is committed and queued, but the live push to connected subscribers was skipped: ' + 'each of them stops receiving new frames until it reconnects. A getSubscribers that keeps ' + 'failing means the hub has silently degraded from push to pull for every publish.',
     wake: 'The offline device was not pinged for this frame. It still redelivers on the next reconnect ' + '(store-and-forward), so nothing is lost — but a wake that keeps failing means the device ' + 'stays asleep until something else wakes it.'
 };
@@ -32,6 +33,7 @@ const reportStoreError = getReporter([
  * methods, a topic for fan-out, nothing for a store-wide purge. */ function subjectOf(event) {
     switch(event.method){
         case 'purge':
+        case 'purgeSubscriptions':
             return '';
         case 'getSubscribers':
             return ` on topic ${event.topicID}`;

package/lib/hub.d.ts

@@ -20,6 +20,11 @@ export type HubPurgeOptions = {
      * store's, since the store is the thing that refuses the subscribe.
      */
     olderThan?: number;
+    /**
+     * Subscription inactivity window in seconds. Default: 7776000 (90 days).
+     * Clamped to at least olderThan so subscriptions outlive the message retention window.
+     */
+    subscriptionOlderThan?: number;
 };
 /** Replay settings a host may tune. The hub always enables replay checks and rejects stale tokens. */
 export type HubReplayOptions = Omit<ReplayOptions, 'enabled' | 'rejectStale'>;

package/lib/hub.js

@@ -69,16 +69,31 @@ export function createHub(params) {
     if (params.purge !== false) {
         const interval = params.purge?.interval ?? 3_600_000;
         const olderThan = params.purge?.olderThan ?? 604_800;
+        const subscriptionOlderThan = Math.max(params.purge?.subscriptionOlderThan ?? 7_776_000, olderThan);
+        const store = params.store;
         purgeTimer = setInterval(()=>{
-            const run = params.store.purge({
-                olderThan
-            }).then(()=>{}).catch((error)=>{
-                // Purge failures are non-fatal; retried on the next interval
-                storeErrorReporter({
-                    method: 'purge',
-                    error
-                });
-            });
+            const run = (async ()=>{
+                try {
+                    await store.purge({
+                        olderThan
+                    });
+                } catch (error) {
+                    storeErrorReporter({
+                        method: 'purge',
+                        error
+                    });
+                }
+                try {
+                    await store.purgeSubscriptions?.({
+                        olderThan: subscriptionOlderThan
+                    });
+                } catch (error) {
+                    storeErrorReporter({
+                        method: 'purgeSubscriptions',
+                        error
+                    });
+                }
+            })();
             purgesInFlight.add(run);
             void run.finally(()=>{
                 purgesInFlight.delete(run);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kumiai/hub-server",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Hub server for Enkaku E2EE group message routing",
   "keywords": [
     "hub",
@@ -25,20 +25,20 @@
     "lib/*"
   ],
   "dependencies": {
-    "@enkaku/protocol": "^0.22.1",
-    "@enkaku/server": "^0.22.1",
-    "@kokuin/capability": "^0.5.1",
-    "@kokuin/token": "^0.6.1",
-    "@kumiai/hub-protocol": "^0.11.0",
+    "@enkaku/protocol": "^0.22.2",
+    "@enkaku/server": "^0.22.2",
+    "@kokuin/capability": "^0.5.2",
+    "@kokuin/token": "^0.6.2",
+    "@kumiai/hub-protocol": "^0.12.0",
     "@sozai/codec": "^0.4.3",
     "@sozai/event": "^0.1.6",
     "@sozai/log": "^0.4.0"
   },
   "devDependencies": {
-    "@enkaku/client": "^0.22.1",
-    "@enkaku/transport": "^0.22.1",
-    "@kumiai/hub-conformance": "^0.11.0",
-    "@kumiai/hub-wake": "^0.11.0"
+    "@enkaku/client": "^0.22.2",
+    "@enkaku/transport": "^0.22.2",
+    "@kumiai/hub-conformance": "^0.12.0",
+    "@kumiai/hub-wake": "^0.12.0"
   },
   "publishConfig": {
     "access": "public"