@kumiai/hub-server 0.13.0 → 0.13.1

package/README.md

@@ -5,8 +5,8 @@ client registry for push fan-out, and an in-memory `HubStore` for development an
 
 ## Exports
 
-- `createHub({ transport, store, identity, ... })` — the whole server: handlers, registry, access
-  rules, rate limits, and an optional scheduled purge. Returns `{ registry, server }`.
+- `createHub({ transport, store, identity, ... })` -- handlers, registry, access rules, rate limits and an optional scheduled purge.
+  Returns `{ registry, server, dispose }`.
 - `createHandlers({ registry, store, ... })` — the handlers alone, for a host assembling its own
   server.
 - `createMemoryStore({ maxDepth?, retention? })` — an in-memory `HubStore`. For testing and
@@ -160,3 +160,19 @@ rather than passing silently. Pass an empty handler to silence it deliberately.
 There is no throttling: a permanently broken store reports per request. logtape ships
 `getThrottlingFilter`, so rate control belongs in the app's sink configuration where an operator
 can tune it.
+
+## Invocation hooks and attribution
+
+`createHub` accepts optional `onInvocation`, forwarded to the Enkaku server for authenticated invocation context and delegation verification.
+`createHub` and `createHandlers` accept optional `resolveAttribution({ message, senderDID })`.
+The resolver can return `HubAttribution`, `undefined`, or a promise of either.
+
+Without a resolver result, publishes use `{ account: senderDID, actor: senderDID, via: 'direct' }`.
+The sender DID still comes from the verified signature.
+A resolver supplies host accounting metadata rather than changing the authenticated sender or authorisation rules.
+Only a verified delegation yields `via: 'delegated'`. A claimed subject alone does not prove delegation.
+Hosts can use `onInvocation` to verify delegation before resolving attribution.
+
+The store receives the resolved attribution with the publish.
+The SQL stores persist it. The development memory store reports publish outcomes but does not implement occupancy sampling.
+Unconfigured hooks preserve existing routing, retention and delivery behaviour.

package/lib/handlers.d.ts

@@ -1,5 +1,5 @@
 import { type ProcedureHandlers } from '@enkaku/server';
-import type { HubProtocol, HubStore, WakeRegistry } from '@kumiai/hub-protocol';
+import type { HubAttribution, HubProtocol, HubStore, WakeRegistry } from '@kumiai/hub-protocol';
 import { type RateLimitConfig } from './rateLimit.js';
 import type { HubClientRegistry } from './registry.js';
 import type { WakeDispatcher } from './wake.js';
@@ -198,6 +198,10 @@ export type CreateHandlersParams = {
     registry: HubClientRegistry;
     store: HubStore;
     authorize?: AuthorizeHook;
+    resolveAttribution?: (params: {
+        message: unknown;
+        senderDID: string;
+    }) => HubAttribution | undefined | Promise<HubAttribution | undefined>;
     rateLimits?: Partial<HubRateLimits>;
     keyPackageFetchLimits?: Partial<KeyPackageFetchLimits>;
     /** Max frames queued-but-unflushed on a receive channel. See {@link DEFAULT_RECEIVE_BUFFER_LIMIT}

package/lib/handlers.js

@@ -287,8 +287,17 @@ export function createHandlers(params) {
             let sequenceID;
             let deduped;
             try {
+                const attribution = await params.resolveAttribution?.({
+                    message: ctx.message,
+                    senderDID
+                }) ?? {
+                    account: senderDID,
+                    actor: senderDID,
+                    via: 'direct'
+                };
                 const result = await store.publish({
                     senderDID,
+                    attribution,
                     topicID,
                     payload: payloadBytes,
                     retain: ctx.param.retain,

package/lib/hub.d.ts

@@ -1,9 +1,9 @@
 import type { ServerTransportOf } from '@enkaku/protocol';
-import type { AccessRules, ReplayOptions, ResourceLimits, Server } from '@enkaku/server';
+import type { AccessRules, InvocationHook, ReplayOptions, ResourceLimits, Server } from '@enkaku/server';
 import type { VerifyTokenHook } from '@kokuin/capability';
 import type { CryptoOptions, Identity } from '@kokuin/token';
 import type { HubProtocol, HubStore, WakeRegistry, WakeSender } from '@kumiai/hub-protocol';
-import { type AuthorizeHook, type HubRateLimits, type HubStoreErrorHook, type KeyPackageFetchLimits } from './handlers.js';
+import type { AuthorizeHook, CreateHandlersParams, HubRateLimits, HubStoreErrorHook, KeyPackageFetchLimits } from './handlers.js';
 import { HubClientRegistry } from './registry.js';
 /**
  * Default access rules: any authenticated DID may call hub procedures.
@@ -53,6 +53,9 @@ export type CreateHubParams = CryptoOptions & {
      * delegated capabilities.
      */
     verifyToken?: VerifyTokenHook;
+    onInvocation?: InvocationHook;
+    /** An absent result attributes directly to the sender. */
+    resolveAttribution?: CreateHandlersParams['resolveAttribution'];
     /** Publish rate limits. Merged over {@link DEFAULT_RATE_LIMITS}. */
     rateLimits?: Partial<HubRateLimits>;
     /**

package/lib/hub.js

@@ -32,6 +32,7 @@ export function createHub(params) {
         registry,
         store: params.store,
         authorize: params.authorize,
+        resolveAttribution: params.resolveAttribution,
         rateLimits: params.rateLimits,
         keyPackageFetchLimits: params.keyPackageFetchLimits,
         receiveAuthCacheTTL: params.receiveAuthCacheTTL,
@@ -58,6 +59,7 @@ export function createHub(params) {
         crypto: params.crypto,
         accessRules: params.accessRules ?? DEFAULT_HUB_ACCESS_RULES,
         verifyToken: params.verifyToken,
+        onInvocation: params.onInvocation,
         replay: {
             ...params.replay,
             enabled: true,

package/lib/memoryStore.js

@@ -137,7 +137,9 @@ function isLive(entry, nowSeconds) {
                 if (accepted !== undefined) {
                     return {
                         sequenceID: accepted,
-                        deduped: true
+                        deduped: true,
+                        outcome: 'deduplicated',
+                        storedBytes: 0
                     };
                 }
             }
@@ -174,7 +176,9 @@ function isLive(entry, nowSeconds) {
             if (retain === 'mailbox' && recipients.size === 0) {
                 return {
                     sequenceID,
-                    deduped: false
+                    deduped: false,
+                    outcome: 'no-recipients',
+                    storedBytes: 0
                 };
             }
             const entry = {
@@ -219,7 +223,9 @@ function isLive(entry, nowSeconds) {
             }
             return {
                 sequenceID,
-                deduped: false
+                deduped: false,
+                outcome: 'inserted',
+                storedBytes: params.payload.byteLength
             };
         },
         async fetch (params) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kumiai/hub-server",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "description": "Hub server for Enkaku E2EE group message routing",
   "keywords": [
     "hub",
@@ -25,19 +25,19 @@
     "lib/*"
   ],
   "dependencies": {
-    "@enkaku/protocol": "^0.23.0",
-    "@enkaku/server": "^0.23.0",
+    "@enkaku/protocol": "^0.23.1",
+    "@enkaku/server": "^0.23.1",
     "@kokuin/capability": "^0.7.0",
     "@kokuin/token": "^0.7.0",
-    "@kumiai/hub-protocol": "^0.13.0",
+    "@kumiai/hub-protocol": "^0.13.1",
     "@sozai/codec": "^0.4.4",
     "@sozai/event": "^0.1.6",
     "@sozai/log": "^0.4.0"
   },
   "devDependencies": {
-    "@enkaku/client": "^0.23.0",
-    "@enkaku/transport": "^0.23.0",
-    "@kokuin/crypto": "^0.7.0",
+    "@enkaku/client": "^0.23.1",
+    "@enkaku/transport": "^0.23.1",
+    "@kokuin/crypto": "^0.7.1",
     "@kumiai/hub-conformance": "^0.13.0",
     "@kumiai/hub-wake": "^0.13.0"
   },