@sockethub/server 5.0.0-beta.1 → 5.0.0-beta.2

package/dist/connection-scope.d.ts

@@ -58,6 +58,7 @@ export declare function beginCredentialScope(sessionId: string, platform: string
 /** Drops a session's scopes. Called when the session ends. */
 export declare function clearSessionScopes(sessionId: string): void;
 export interface ScopeRequest {
+    shareConnections?: boolean;
     /**
      * Session the credentials were submitted under. Over a socket this is the
      * socket id; over HTTP it is the request's single-use session, which is

package/dist/index.js

@@ -11057,7 +11057,7 @@ var init_package = __esm(() => {
   package_default = {
     name: "@sockethub/schemas",
     description: "JSON schema files for validating Sockethub Activity Streams",
-    version: "3.0.0-beta.1",
+    version: "3.0.0-beta.2",
     type: "module",
     private: false,
     author: "Nick Jennings <nick@silverbucket.net>",
@@ -11127,7 +11127,7 @@ var init_package = __esm(() => {
       "ajv-formats": "^2.1.1",
       "ajv-formats-draft2019": "^1.6.1"
     },
-    gitHead: "06c9062f1cb5f0c0599fd979e6e91da79f08eda0",
+    gitHead: "1f74d4e07311496f0acc021855137bc197d79eab",
     types: "./dist/index.d.ts"
   };
 });
@@ -11236,8 +11236,11 @@ var init_sockethub_config = __esm(() => {
           "@sockethub/platform-caldav",
           "@sockethub/platform-dummy",
           "@sockethub/platform-feeds",
+          "@sockethub/platform-email",
           "@sockethub/platform-irc",
           "@sockethub/platform-metadata",
+          "@sockethub/platform-messenger",
+          "@sockethub/platform-instagram",
           "@sockethub/platform-xmpp"
         ]
       },
@@ -11253,7 +11256,8 @@ var init_sockethub_config = __esm(() => {
               connectTimeoutMs: { type: "integer", minimum: 1 },
               allowPrivateAddresses: { type: "boolean" },
               allowInsecureHttp: { type: "boolean" },
-              concurrency: { type: "integer", minimum: 1 }
+              concurrency: { type: "integer", minimum: 1 },
+              discoveryCacheTtlMs: { type: "integer", minimum: 0 }
             }
           },
           "@sockethub/platform-caldav": {
@@ -11263,7 +11267,20 @@ var init_sockethub_config = __esm(() => {
               connectTimeoutMs: { type: "integer", minimum: 1 },
               allowPrivateAddresses: { type: "boolean" },
               allowInsecureHttp: { type: "boolean" },
-              concurrency: { type: "integer", minimum: 1 }
+              concurrency: { type: "integer", minimum: 1 },
+              discoveryCacheTtlMs: { type: "integer", minimum: 0 }
+            }
+          },
+          "@sockethub/platform-email": {
+            type: "object",
+            additionalProperties: false,
+            properties: {
+              connectTimeoutMs: {
+                type: "integer",
+                minimum: 5000,
+                maximum: 120000
+              },
+              allowPrivateAddresses: { type: "boolean" }
             }
           },
           "@sockethub/platform-dummy": {
@@ -11286,7 +11303,8 @@ var init_sockethub_config = __esm(() => {
             type: "object",
             additionalProperties: false,
             properties: {
-              connectTimeoutMs: { type: "number" }
+              connectTimeoutMs: { type: "number" },
+              allowPrivateAddresses: { type: "boolean" }
             }
           },
           "@sockethub/platform-xmpp": {
@@ -11396,6 +11414,12 @@ var init_sockethub_config = __esm(() => {
             default: 20,
             description: "Maximum persistent instances per client IP, including HTTP actions. 0 disables the cap."
           },
+          maxStartsPerIpPerMinute: {
+            type: "integer",
+            minimum: 0,
+            default: 60,
+            description: "Maximum new persistent instances a client IP may start per minute, " + "including HTTP actions. Bounds fork/teardown churn that the " + "concurrent caps allow. Reusing a running instance does not count. " + "0 disables the cap."
+          },
           maxPlatformInstances: {
             type: "number",
             minimum: 0,
@@ -27650,9 +27674,8 @@ function addPlatformSchema(schema, platform_type) {
     return;
   }
   const schemaRef = `${schemaURL}/context/${platform_type}`;
-  if (!instance.getSchema(schemaRef)) {
-    instance.addSchema(schema, schemaRef);
-  }
+  instance.removeSchema(schemaRef);
+  instance.addSchema(schema, schemaRef);
 }
 function addPlatformContext(platformId, platformContextUrl) {
   registerPlatformContext(platformId, platformContextUrl, `${schemaURL}/context/${platformId}/messages`, `${schemaURL}/context/${platformId}/credentials`);
@@ -30000,6 +30023,7 @@ var init_config_schema = __esm(() => {
     "rateLimiter.maxConnectionsPerIp": { format: "nat" },
     "limits.maxInstancesPerSession": { format: "nat" },
     "limits.maxInstancesPerIp": { format: "nat" },
+    "limits.maxStartsPerIpPerMinute": { format: "nat" },
     "limits.maxPlatformInstances": { format: "nat" },
     "credentials.ttlMs": {
       format: "nat",
@@ -99068,7 +99092,7 @@ var require_package2 = __commonJS(function(exports, module) {
   module.exports = {
     name: "@sockethub/server",
     description: "A polyglot messaging service, server libraries",
-    version: "5.0.0-beta.1",
+    version: "5.0.0-beta.2",
     type: "module",
     private: false,
     author: "Nick Jennings <nick@silverbucket.net>",
@@ -99093,7 +99117,7 @@ var require_package2 = __commonJS(function(exports, module) {
     bin: "bin/sockethub",
     preferGlobal: true,
     engines: {
-      node: ">=20"
+      node: ">=20.19"
     },
     keywords: [
       "sockethub",
@@ -99120,11 +99144,11 @@ var require_package2 = __commonJS(function(exports, module) {
     dependencies: {
       "@sentry/node": "^10.36.0",
       "@sentry/profiling-node": "10.36.0",
-      "@sockethub/client": "^5.0.0-beta.1",
-      "@sockethub/data-layer": "^1.0.0-beta.1",
-      "@sockethub/logger": "^1.0.0-beta.1",
-      "@sockethub/schemas": "^3.0.0-beta.1",
-      "@sockethub/util": "^1.0.0-beta.1",
+      "@sockethub/client": "^5.0.0-beta.2",
+      "@sockethub/data-layer": "^1.0.0-beta.2",
+      "@sockethub/logger": "^1.0.0-beta.2",
+      "@sockethub/schemas": "^3.0.0-beta.2",
+      "@sockethub/util": "^1.0.0-beta.2",
       chalk: "^5.6.2",
       convict: "^6.2.5",
       debug: "^4.4.3",
@@ -99158,16 +99182,19 @@ var require_package2 = __commonJS(function(exports, module) {
       "web-streams-polyfill": "^3.3.3"
     },
     optionalDependencies: {
-      "@sockethub/examples": "^1.0.0-beta.1",
-      "@sockethub/platform-caldav": "^1.0.0-beta.1",
-      "@sockethub/platform-carddav": "^1.0.0-beta.1",
-      "@sockethub/platform-dummy": "^3.0.0-beta.1",
-      "@sockethub/platform-feeds": "^4.0.0-beta.1",
-      "@sockethub/platform-irc": "^4.0.0-beta.1",
-      "@sockethub/platform-metadata": "^1.0.1-beta.1",
-      "@sockethub/platform-xmpp": "^5.0.0-beta.1"
-    },
-    gitHead: "06c9062f1cb5f0c0599fd979e6e91da79f08eda0",
+      "@sockethub/examples": "^1.0.0-beta.2",
+      "@sockethub/platform-caldav": "^1.0.0-beta.2",
+      "@sockethub/platform-carddav": "^1.0.0-beta.2",
+      "@sockethub/platform-dummy": "^3.0.0-beta.2",
+      "@sockethub/platform-email": "^1.0.0-beta.2",
+      "@sockethub/platform-feeds": "^4.0.0-beta.2",
+      "@sockethub/platform-instagram": "^1.0.0-beta.2",
+      "@sockethub/platform-irc": "^4.0.0-beta.2",
+      "@sockethub/platform-messenger": "^1.0.0-beta.2",
+      "@sockethub/platform-metadata": "^1.0.1-beta.2",
+      "@sockethub/platform-xmpp": "^5.0.0-beta.2"
+    },
+    gitHead: "1f74d4e07311496f0acc021855137bc197d79eab",
     types: "./dist/index.d.ts"
   };
 });
@@ -100111,7 +100138,7 @@ var require_safer = __commonJS(function(exports, module) {
   module.exports = safer;
 });
 
-// ../../node_modules/iconv-lite/lib/bom-handling.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/lib/bom-handling.js
 var require_bom_handling = __commonJS(function(exports) {
   var BOMChar = "\uFEFF";
   exports.PrependBOM = PrependBOMWrapper;
@@ -100154,7 +100181,7 @@ var require_bom_handling = __commonJS(function(exports) {
   };
 });
 
-// ../../node_modules/iconv-lite/lib/helpers/merge-exports.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/lib/helpers/merge-exports.js
 var require_merge_exports = __commonJS(function(exports, module) {
   var hasOwn = typeof Object.hasOwn === "undefined" ? Function.call.bind(Object.prototype.hasOwnProperty) : Object.hasOwn;
   function mergeModules(target, module2) {
@@ -100167,7 +100194,7 @@ var require_merge_exports = __commonJS(function(exports, module) {
   module.exports = mergeModules;
 });
 
-// ../../node_modules/iconv-lite/encodings/internal.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/internal.js
 var require_internal = __commonJS(function(exports, module) {
   var Buffer2 = require_safer().Buffer;
   module.exports = {
@@ -100340,7 +100367,7 @@ var require_internal = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/iconv-lite/encodings/utf32.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/utf32.js
 var require_utf32 = __commonJS(function(exports) {
   var Buffer2 = require_safer().Buffer;
   exports._utf32 = Utf32Codec;
@@ -100574,7 +100601,7 @@ var require_utf32 = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/iconv-lite/encodings/utf16.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/utf16.js
 var require_utf16 = __commonJS(function(exports) {
   var Buffer2 = require_safer().Buffer;
   exports.utf16be = Utf16BECodec;
@@ -100717,7 +100744,7 @@ var require_utf16 = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/iconv-lite/encodings/utf7.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/utf7.js
 var require_utf7 = __commonJS(function(exports) {
   var Buffer2 = require_safer().Buffer;
   exports.utf7 = Utf7Codec;
@@ -100931,7 +100958,7 @@ var require_utf7 = __commonJS(function(exports) {
   };
 });
 
-// ../../node_modules/iconv-lite/encodings/sbcs-codec.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/sbcs-codec.js
 var require_sbcs_codec = __commonJS(function(exports) {
   var Buffer2 = require_safer().Buffer;
   exports._sbcs = SBCSCodec;
@@ -100988,7 +101015,7 @@ var require_sbcs_codec = __commonJS(function(exports) {
   SBCSDecoder.prototype.end = function() {};
 });
 
-// ../../node_modules/iconv-lite/encodings/sbcs-data.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/sbcs-data.js
 var require_sbcs_data = __commonJS(function(exports, module) {
   module.exports = {
     10029: "maccenteuro",
@@ -101136,7 +101163,7 @@ var require_sbcs_data = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/iconv-lite/encodings/sbcs-data-generated.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/sbcs-data-generated.js
 var require_sbcs_data_generated = __commonJS(function(exports, module) {
   module.exports = {
     "437": "cp437",
@@ -101593,7 +101620,7 @@ var require_sbcs_data_generated = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/iconv-lite/encodings/dbcs-codec.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/dbcs-codec.js
 var require_dbcs_codec = __commonJS(function(exports) {
   var Buffer2 = require_safer().Buffer;
   exports._dbcs = DBCSCodec;
@@ -102051,7 +102078,7 @@ var require_dbcs_codec = __commonJS(function(exports) {
   }
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/shiftjis.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/shiftjis.json
 var require_shiftjis = __commonJS(function(exports, module) {
   module.exports = [
     ["0", "\x00", 128],
@@ -102180,7 +102207,7 @@ var require_shiftjis = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/eucjp.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/eucjp.json
 var require_eucjp = __commonJS(function(exports, module) {
   module.exports = [
     ["0", "\x00", 127],
@@ -102366,7 +102393,7 @@ var require_eucjp = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/cp936.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/cp936.json
 var require_cp936 = __commonJS(function(exports, module) {
   module.exports = [
     ["0", "\x00", 127, "€"],
@@ -102634,7 +102661,7 @@ var require_cp936 = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/gbk-added.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/gbk-added.json
 var require_gbk_added = __commonJS(function(exports, module) {
   module.exports = [
     ["a140", "", 62],
@@ -102694,12 +102721,12 @@ var require_gbk_added = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/gb18030-ranges.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/gb18030-ranges.json
 var require_gb18030_ranges = __commonJS(function(exports, module) {
   module.exports = { uChars: [128, 165, 169, 178, 184, 216, 226, 235, 238, 244, 248, 251, 253, 258, 276, 284, 300, 325, 329, 334, 364, 463, 465, 467, 469, 471, 473, 475, 477, 506, 594, 610, 712, 716, 730, 930, 938, 962, 970, 1026, 1104, 1106, 8209, 8215, 8218, 8222, 8231, 8241, 8244, 8246, 8252, 8365, 8452, 8454, 8458, 8471, 8482, 8556, 8570, 8596, 8602, 8713, 8720, 8722, 8726, 8731, 8737, 8740, 8742, 8748, 8751, 8760, 8766, 8777, 8781, 8787, 8802, 8808, 8816, 8854, 8858, 8870, 8896, 8979, 9322, 9372, 9548, 9588, 9616, 9622, 9634, 9652, 9662, 9672, 9676, 9680, 9702, 9735, 9738, 9793, 9795, 11906, 11909, 11913, 11917, 11928, 11944, 11947, 11951, 11956, 11960, 11964, 11979, 12284, 12292, 12312, 12319, 12330, 12351, 12436, 12447, 12535, 12543, 12586, 12842, 12850, 12964, 13200, 13215, 13218, 13253, 13263, 13267, 13270, 13384, 13428, 13727, 13839, 13851, 14617, 14703, 14801, 14816, 14964, 15183, 15471, 15585, 16471, 16736, 17208, 17325, 17330, 17374, 17623, 17997, 18018, 18212, 18218, 18301, 18318, 18760, 18811, 18814, 18820, 18823, 18844, 18848, 18872, 19576, 19620, 19738, 19887, 40870, 59244, 59336, 59367, 59413, 59417, 59423, 59431, 59437, 59443, 59452, 59460, 59478, 59493, 63789, 63866, 63894, 63976, 63986, 64016, 64018, 64021, 64025, 64034, 64037, 64042, 65074, 65093, 65107, 65112, 65127, 65132, 65375, 65510, 65536], gbChars: [0, 36, 38, 45, 50, 81, 89, 95, 96, 100, 103, 104, 105, 109, 126, 133, 148, 172, 175, 179, 208, 306, 307, 308, 309, 310, 311, 312, 313, 341, 428, 443, 544, 545, 558, 741, 742, 749, 750, 805, 819, 820, 7922, 7924, 7925, 7927, 7934, 7943, 7944, 7945, 7950, 8062, 8148, 8149, 8152, 8164, 8174, 8236, 8240, 8262, 8264, 8374, 8380, 8381, 8384, 8388, 8390, 8392, 8393, 8394, 8396, 8401, 8406, 8416, 8419, 8424, 8437, 8439, 8445, 8482, 8485, 8496, 8521, 8603, 8936, 8946, 9046, 9050, 9063, 9066, 9076, 9092, 9100, 9108, 9111, 9113, 9131, 9162, 9164, 9218, 9219, 11329, 11331, 11334, 11336, 11346, 11361, 11363, 11366, 11370, 11372, 11375, 11389, 11682, 11686, 11687, 11692, 11694, 11714, 11716, 11723, 11725, 11730, 11736, 11982, 11989, 12102, 12336, 12348, 12350, 12384, 12393, 12395, 12397, 12510, 12553, 12851, 12962, 12973, 13738, 13823, 13919, 13933, 14080, 14298, 14585, 14698, 15583, 15847, 16318, 16434, 16438, 16481, 16729, 17102, 17122, 17315, 17320, 17402, 17418, 17859, 17909, 17911, 17915, 17916, 17936, 17939, 17961, 18664, 18703, 18814, 18962, 19043, 33469, 33470, 33471, 33484, 33485, 33490, 33497, 33501, 33505, 33513, 33520, 33536, 33550, 37845, 37921, 37948, 38029, 38038, 38064, 38065, 38066, 38069, 38075, 38076, 38078, 39108, 39109, 39113, 39114, 39115, 39116, 39265, 39394, 189000] };
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/cp949.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/cp949.json
 var require_cp949 = __commonJS(function(exports, module) {
   module.exports = [
     ["0", "\x00", 127],
@@ -102976,7 +103003,7 @@ var require_cp949 = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/cp950.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/cp950.json
 var require_cp950 = __commonJS(function(exports, module) {
   module.exports = [
     ["0", "\x00", 127],
@@ -103157,7 +103184,7 @@ var require_cp950 = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/tables/big5-added.json
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/tables/big5-added.json
 var require_big5_added = __commonJS(function(exports, module) {
   module.exports = [
     ["8740", "䏰䰲䘃䖦䕸𧉧䵷䖳𧲱䳢𧳅㮕䜶䝄䱇䱀𤊿𣘗𧍒𦺋𧃒䱗𪍑䝏䗚䲅𧱬䴇䪤䚡𦬣爥𥩔𡩣𣸆𣽡晍囻"],
@@ -103283,7 +103310,7 @@ var require_big5_added = __commonJS(function(exports, module) {
   ];
 });
 
-// ../../node_modules/iconv-lite/encodings/dbcs-data.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/dbcs-data.js
 var require_dbcs_data = __commonJS(function(exports, module) {
   module.exports = {
     shiftjis: {
@@ -103454,7 +103481,7 @@ var require_dbcs_data = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/iconv-lite/encodings/index.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/encodings/index.js
 var require_encodings = __commonJS(function(exports, module) {
   var mergeModules = require_merge_exports();
   var modules = [
@@ -103476,7 +103503,7 @@ var require_encodings = __commonJS(function(exports, module) {
   var i;
 });
 
-// ../../node_modules/iconv-lite/lib/streams.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/lib/streams.js
 var require_streams = __commonJS(function(exports, module) {
   var Buffer2 = require_safer().Buffer;
   module.exports = function(streamModule) {
@@ -103574,7 +103601,7 @@ var require_streams = __commonJS(function(exports, module) {
   };
 });
 
-// ../../node_modules/iconv-lite/lib/index.js
+// ../../node_modules/express/node_modules/body-parser/node_modules/iconv-lite/lib/index.js
 var require_lib6 = __commonJS(function(exports, module) {
   var Buffer2 = require_safer().Buffer;
   var bomHandling = require_bom_handling();
@@ -155687,9 +155714,12 @@ function fingerprint(credentials) {
   if (!object) {
     return null;
   }
-  const password = object.password;
-  const token = object.token;
-  const hasSecret = typeof password === "string" && password.length > 0 || typeof token === "string" && token.length > 0;
+  const hasSecret = [object, object.imap, object.smtp].some((candidate) => {
+    if (!candidate || typeof candidate !== "object")
+      return false;
+    const { password, token } = candidate;
+    return typeof password === "string" && password.length > 0 || typeof token === "string" && token.length > 0;
+  });
   if (!hasSecret) {
     return null;
   }
@@ -155737,10 +155767,21 @@ async function resolveConnectionScope(platform, actorId, request = {}) {
     if (pending) {
       const resolved = await pending;
       if (resolved) {
-        return { scope: resolved };
+        return {
+          scope: request.shareConnections === false ? crypto.objectHash({
+            credentials: resolved,
+            session: socketSessionId ?? credentialSessionId
+          }) : resolved
+        };
       }
     }
   }
+  if (request.shareConnections === false) {
+    const session = socketSessionId ?? credentialSessionId;
+    if (!session)
+      throw new Error("session required for private connection");
+    return { scope: crypto.objectHash({ session }) };
+  }
   return anonymousScope(platform, actorId, {
     credentialSessionId,
     socketSessionId,
@@ -157016,7 +157057,11 @@ class PlatformInstance {
   heartbeatFailureHandled = false;
   replaced = false;
   shutdownResult;
+  retirementError;
   actor;
+  get actorId() {
+    return this.actor;
+  }
   constructor(params) {
     this.id = params.identifier;
     this.queueId = params.queueId ?? crypto.randId(16);
@@ -157091,7 +157136,15 @@ class PlatformInstance {
     this.replaced = true;
     this.flaggedForTermination = true;
   }
-  shutdown() {
+  shutdown(pendingJobError) {
+    if (pendingJobError && !this.retirementError) {
+      this.retirementError = pendingJobError;
+      const pending = [...this.completedJobHandlers.values()];
+      this.completedJobHandlers.clear();
+      this.completedJobHandlerTimestamps.clear();
+      for (const handler of pending)
+        this.failRetiredJob(handler);
+    }
     if (!this.shutdownResult) {
       this.shutdownResult = this.teardown();
     }
@@ -157140,10 +157193,26 @@ class PlatformInstance {
     });
   }
   registerCompletedJobHandler(title, handler) {
+    if (this.retirementError) {
+      this.failRetiredJob(handler);
+      return;
+    }
     this.pruneExpiredJobHandlers();
     this.completedJobHandlers.set(title, handler);
     this.completedJobHandlerTimestamps.set(title, Date.now());
   }
+  failRetiredJob(handler) {
+    try {
+      handler({
+        "@context": buildCanonicalContext(this.contextUrl ?? INTERNAL_PLATFORM_CONTEXT_URL),
+        type: "error",
+        actor: { id: this.actor ?? this.name, type: "service" },
+        error: this.retirementError
+      });
+    } catch (error) {
+      this.log.error(`failed to acknowledge retired job: ${errorMessage(error)}`);
+    }
+  }
   takeCompletedJobHandler(title) {
     const handler = this.completedJobHandlers.get(title);
     if (handler) {
@@ -157218,6 +157287,8 @@ class PlatformInstance {
     return payload;
   }
   async handleJobResult(state, job, result) {
+    if (this.retirementError)
+      return;
     let payload = result;
     if (state === "failed") {
       payload = job.msg;
@@ -157563,6 +157634,8 @@ class ProcessManager {
   parentSecret2;
   init;
   ensureChains = new Map;
+  startsPerIp = new Map;
+  startsWindowBegan = 0;
   constructor(parentId, parentSecret1, parentSecret2, init) {
     this.parentId = parentId;
     this.parentSecret1 = parentSecret1;
@@ -157574,7 +157647,8 @@ class ProcessManager {
     const connectionScope = platformDetails.config.persist ? await resolveConnectionScope(platform, actorId, {
       credentialSessionId: credentialSessionId ?? sessionId,
       socketSessionId: sessionId,
-      sessionIp
+      sessionIp,
+      shareConnections: platformDetails.config.shareConnections
     }) : undefined;
     const pi = platformDetails.config.persist ? await this.ensureProcess(platform, sessionId, actorId, sessionIp, connectionScope) : await this.ensureProcess(platform);
     pi.config = platformDetails.config;
@@ -157605,23 +157679,38 @@ class ProcessManager {
   }
   ensureProcess(platform, sessionId, actor, sessionIp, connectionScope) {
     const identifier = getPlatformId(platform, actor, connectionScope?.scope);
-    const prior = this.ensureChains.get(identifier) ?? Promise.resolve();
+    const platformConfig = this.init.platforms.get(platform).config;
+    const privateSession = platformConfig.persist && platformConfig.shareConnections === false && sessionId;
+    const chainKey = privateSession ? JSON.stringify([platform, actor, sessionId]) : identifier;
+    const prior = this.ensureChains.get(chainKey) ?? Promise.resolve();
     const run = prior.then(() => this.ensureProcessNow(identifier, platform, sessionId, actor, sessionIp, connectionScope));
     const settled = run.then(() => {
       return;
     }, () => {
       return;
     });
-    this.ensureChains.set(identifier, settled);
+    this.ensureChains.set(chainKey, settled);
     settled.then(() => {
-      if (this.ensureChains.get(identifier) === settled) {
-        this.ensureChains.delete(identifier);
+      if (this.ensureChains.get(chainKey) === settled) {
+        this.ensureChains.delete(chainKey);
       }
     });
     return run;
   }
   async ensureProcessNow(identifier, platform, sessionId, actor, sessionIp, connectionScope) {
+    const platformConfig = this.init.platforms.get(platform).config;
     const existing = platformInstances.get(identifier);
+    if (actor !== undefined && !(existing && this.isProcessAlive(existing)))
+      this.assertStartRate(sessionIp, false);
+    if (platformConfig.persist && platformConfig.shareConnections === false && sessionId) {
+      for (const previous of platformInstances.values()) {
+        if (previous.id === identifier || previous.name !== platform || previous.actorId !== actor || !previous.sessions.has(sessionId))
+          continue;
+        previous.deregisterSession(sessionId);
+        if (!previous.sessions.size)
+          await previous.shutdown("credentials replaced; pending operation interrupted; message submission may already have succeeded; do not automatically retry sends");
+      }
+    }
     const reusable = existing && this.isProcessAlive(existing);
     this.assertInstanceCapacity(platform, identifier, actor === undefined, sessionId, sessionIp, !!reusable);
     let inheritedQueueId;
@@ -157631,6 +157720,8 @@ class ProcessManager {
       await existing.shutdown();
       this.assertInstanceCapacity(platform, identifier, actor === undefined, sessionId, sessionIp, !!reusable);
     }
+    if (!reusable && actor !== undefined)
+      this.assertStartRate(sessionIp, true);
     const platformInstance = reusable ? existing : this.createPlatformInstance(identifier, platform, actor, connectionScope?.scope, inheritedQueueId);
     if (sessionIp && !platformInstance.global) {
       platformInstance.ownerIps.add(sessionIp);
@@ -157661,6 +157752,22 @@ class ProcessManager {
       throw new Error(`per-address platform instance limit reached (${perIp})`);
     }
   }
+  assertStartRate(sessionIp, charge) {
+    const max = Number(config_default.get("limits:maxStartsPerIpPerMinute") ?? 0);
+    if (!(max > 0) || !sessionIp)
+      return;
+    const now = Date.now();
+    if (now - this.startsWindowBegan >= 60000) {
+      this.startsPerIp.clear();
+      this.startsWindowBegan = now;
+    }
+    const starts = this.startsPerIp.get(sessionIp) ?? 0;
+    if (starts >= max) {
+      throw new Error(`per-address platform start rate limit reached (${max} per minute)`);
+    }
+    if (charge)
+      this.startsPerIp.set(sessionIp, starts + 1);
+  }
   isProcessAlive(platformInstance) {
     const pid = platformInstance.process?.pid;
     if (!pid) {

package/dist/platform-instance.d.ts

@@ -64,12 +64,14 @@ export default class PlatformInstance {
     private heartbeatFailureHandled;
     private replaced;
     private shutdownResult?;
+    private retirementError?;
     /**
      * Actor this instance was opened for. Updated when the platform re-keys
      * (IRC nick change) so a later rename moves the credential scope off the
      * actor the client is using now, not the one from process start.
      */
     private actor?;
+    get actorId(): string | undefined;
     constructor(params: PlatformInstanceParams);
     createQueue(): void;
     resolveSentryEnv(): string | undefined;
@@ -98,7 +100,7 @@ export default class PlatformInstance {
      * independent run would resolve while the first is still obliterating
      * the queue name the replacement is about to reuse.
      */
-    shutdown(): Promise<void>;
+    shutdown(pendingJobError?: string): Promise<void>;
     private teardown;
     /**
      * When jobs are completed or failed, we prepare the results and send them to the client socket
@@ -111,6 +113,7 @@ export default class PlatformInstance {
      * mid-job) don't leak handlers for the lifetime of the instance.
      */
     registerCompletedJobHandler(title: string, handler: CompletedJobHandler): void;
+    private failRetiredJob;
     private takeCompletedJobHandler;
     private pruneExpiredJobHandlers;
     /**