@syncular/server-hono 0.0.1-60

package/dist/proxy/connection-manager.js

@@ -0,0 +1,251 @@
+/**
+ * @syncular/server-hono - Proxy Connection Manager
+ *
+ * Manages WebSocket connections for the proxy.
+ */
+import { executeProxyQuery } from '@syncular/server';
+/**
+ * Manages proxy WebSocket connections and their state.
+ */
+export class ProxyConnectionManager {
+    connections = new Map();
+    config;
+    idleTimeoutMs;
+    maxConnections;
+    constructor(config) {
+        this.config = config;
+        this.idleTimeoutMs = config.idleTimeoutMs ?? 30000;
+        this.maxConnections = config.maxConnections ?? 100;
+    }
+    /**
+     * Check if a new connection can be accepted.
+     */
+    canAccept() {
+        return this.connections.size < this.maxConnections;
+    }
+    /**
+     * Get the current connection count.
+     */
+    getConnectionCount() {
+        return this.connections.size;
+    }
+    /**
+     * Handle the handshake message and register the connection.
+     */
+    register(ws, handshake) {
+        const state = {
+            ws,
+            actorId: handshake.actorId,
+            clientId: handshake.clientId,
+            transaction: null,
+            lastActivity: Date.now(),
+            idleTimer: null,
+        };
+        this.connections.set(ws, state);
+        this.resetIdleTimer(state);
+        return state;
+    }
+    /**
+     * Get the connection state for a WebSocket.
+     */
+    get(ws) {
+        return this.connections.get(ws);
+    }
+    /**
+     * Unregister and cleanup a connection.
+     */
+    async unregister(ws) {
+        const state = this.connections.get(ws);
+        if (!state)
+            return;
+        // Clear idle timer
+        if (state.idleTimer) {
+            clearTimeout(state.idleTimer);
+        }
+        // Rollback any pending transaction by rejecting the promise
+        if (state.transaction) {
+            const rejectTransaction = state.__rejectTransaction;
+            if (rejectTransaction) {
+                rejectTransaction(new Error('Connection closed'));
+            }
+            state.transaction = null;
+            state.__resolveTransaction = undefined;
+            state.__rejectTransaction = undefined;
+        }
+        this.connections.delete(ws);
+    }
+    /**
+     * Handle a proxy message and return the response.
+     */
+    async handleMessage(ws, message) {
+        const state = this.connections.get(ws);
+        if (!state) {
+            return {
+                id: message.id,
+                type: 'error',
+                error: 'Connection not registered',
+            };
+        }
+        // Update activity and reset idle timer
+        state.lastActivity = Date.now();
+        this.resetIdleTimer(state);
+        try {
+            switch (message.type) {
+                case 'begin':
+                    return await this.handleBegin(state, message);
+                case 'commit':
+                    return await this.handleCommit(state, message);
+                case 'rollback':
+                    return await this.handleRollback(state, message);
+                case 'query':
+                    return await this.handleQuery(state, message);
+                default:
+                    return {
+                        id: message.id,
+                        type: 'error',
+                        error: `Unknown message type: ${message.type}`,
+                    };
+            }
+        }
+        catch (err) {
+            return {
+                id: message.id,
+                type: 'error',
+                error: err instanceof Error ? err.message : 'Unknown error',
+            };
+        }
+    }
+    async handleBegin(state, message) {
+        if (state.transaction) {
+            return {
+                id: message.id,
+                type: 'error',
+                error: 'Transaction already in progress',
+            };
+        }
+        // Start a transaction and keep it open
+        // We use a workaround since Kysely doesn't expose raw transaction control
+        return new Promise((resolve) => {
+            this.config.db
+                .transaction()
+                .execute(async (trx) => {
+                state.transaction = trx;
+                // Wait for commit or rollback
+                return new Promise((resolveTransaction, rejectTransaction) => {
+                    state.__resolveTransaction = resolveTransaction;
+                    state.__rejectTransaction = rejectTransaction;
+                    resolve({
+                        id: message.id,
+                        type: 'result',
+                    });
+                });
+            })
+                .catch(() => {
+                // Transaction was rolled back externally
+            });
+        });
+    }
+    async handleCommit(state, message) {
+        if (!state.transaction) {
+            return {
+                id: message.id,
+                type: 'error',
+                error: 'No transaction in progress',
+            };
+        }
+        // Resolve the transaction promise to commit
+        const resolveTransaction = state.__resolveTransaction;
+        if (resolveTransaction) {
+            resolveTransaction();
+        }
+        state.transaction = null;
+        state.__resolveTransaction = undefined;
+        state.__rejectTransaction = undefined;
+        return {
+            id: message.id,
+            type: 'result',
+        };
+    }
+    async handleRollback(state, message) {
+        if (!state.transaction) {
+            return {
+                id: message.id,
+                type: 'error',
+                error: 'No transaction in progress',
+            };
+        }
+        // Reject the transaction promise to trigger rollback
+        const rejectTransaction = state.__rejectTransaction;
+        if (rejectTransaction) {
+            rejectTransaction(new Error('Transaction rolled back'));
+        }
+        state.transaction = null;
+        state.__resolveTransaction = undefined;
+        state.__rejectTransaction = undefined;
+        return {
+            id: message.id,
+            type: 'result',
+        };
+    }
+    async handleQuery(state, message) {
+        if (!message.sql) {
+            return {
+                id: message.id,
+                type: 'error',
+                error: 'Missing SQL query',
+            };
+        }
+        const db = state.transaction ?? this.config.db;
+        const result = await executeProxyQuery({
+            db,
+            dialect: this.config.dialect,
+            shapes: this.config.shapes,
+            ctx: {
+                actorId: state.actorId,
+                clientId: state.clientId,
+            },
+            sqlQuery: message.sql,
+            parameters: message.parameters ?? [],
+        });
+        return {
+            id: message.id,
+            type: 'result',
+            rows: result.rows,
+            rowCount: result.rowCount,
+        };
+    }
+    resetIdleTimer(state) {
+        if (state.idleTimer) {
+            clearTimeout(state.idleTimer);
+        }
+        if (this.idleTimeoutMs <= 0)
+            return;
+        state.idleTimer = setTimeout(() => {
+            // Close idle connection
+            try {
+                state.ws.close(4000, 'Idle timeout');
+            }
+            catch {
+                // Ignore close errors
+            }
+            this.unregister(state.ws);
+        }, this.idleTimeoutMs);
+    }
+    /**
+     * Close all connections.
+     */
+    async closeAll() {
+        const promises = [];
+        for (const [ws] of this.connections) {
+            try {
+                ws.close(1000, 'Server shutdown');
+            }
+            catch {
+                // Ignore close errors
+            }
+            promises.push(this.unregister(ws));
+        }
+        await Promise.all(promises);
+    }
+}
+//# sourceMappingURL=connection-manager.js.map

package/dist/proxy/connection-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-manager.js","sourceRoot":"","sources":["../../src/proxy/connection-manager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAgCrD;;GAEG;AACH,MAAM,OAAO,sBAAsB;IACzB,WAAW,GAAG,IAAI,GAAG,EAAuC,CAAC;IAC7D,MAAM,CAAmC;IACzC,aAAa,CAAS;IACtB,cAAc,CAAS;IAE/B,YAAY,MAAwC,EAAE;QACpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,KAAK,CAAC;QACnD,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,GAAG,CAAC;IAAA,CACpD;IAED;;OAEG;IACH,SAAS,GAAY;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC;IAAA,CACpD;IAED;;OAEG;IACH,kBAAkB,GAAW;QAC3B,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAAA,CAC9B;IAED;;OAEG;IACH,QAAQ,CAAC,EAAa,EAAE,SAAyB,EAA4B;QAC3E,MAAM,KAAK,GAA6B;YACtC,EAAE;YACF,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,WAAW,EAAE,IAAI;YACjB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,SAAS,EAAE,IAAI;SAChB,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAE3B,OAAO,KAAK,CAAC;IAAA,CACd;IAED;;OAEG;IACH,GAAG,CAAC,EAAa,EAAwC;QACvD,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAAA,CACjC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,EAAa,EAAiB;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,mBAAmB;QACnB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;QAED,4DAA4D;QAC5D,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,iBAAiB,GAAG,KAAK,CAAC,mBAAmB,CAAC;YACpD,IAAI,iBAAiB,EAAE,CAAC;gBACtB,iBAAiB,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;YACzB,KAAK,CAAC,oBAAoB,GAAG,SAAS,CAAC;YACvC,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAAA,CAC7B;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,EAAa,EACb,OAAqB,EACG;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,2BAA2B;aACnC,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAE3B,IAAI,CAAC;YACH,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,KAAK,OAAO;oBACV,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAEhD,KAAK,QAAQ;oBACX,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAEjD,KAAK,UAAU;oBACb,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAEnD,KAAK,OAAO;oBACV,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAEhD;oBACE,OAAO;wBACL,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,yBAAyB,OAAO,CAAC,IAAI,EAAE;qBAC/C,CAAC;YACN,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAC5D,CAAC;QACJ,CAAC;IAAA,CACF;IAEO,KAAK,CAAC,WAAW,CACvB,KAA+B,EAC/B,OAAqB,EACG;QACxB,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO;gBACL,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,iCAAiC;aACzC,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,0EAA0E;QAC1E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE;iBACX,WAAW,EAAE;iBACb,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;gBACtB,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC;gBAExB,8BAA8B;gBAC9B,OAAO,IAAI,OAAO,CAAO,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,EAAE,CAAC;oBAClE,KAAK,CAAC,oBAAoB,GAAG,kBAAkB,CAAC;oBAChD,KAAK,CAAC,mBAAmB,GAAG,iBAAiB,CAAC;oBAC9C,OAAO,CAAC;wBACN,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,IAAI,EAAE,QAAQ;qBACf,CAAC,CAAC;gBAAA,CACJ,CAAC,CAAC;YAAA,CACJ,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC;gBACX,yCAAyC;YAD7B,CAEb,CAAC,CAAC;QAAA,CACN,CAAC,CAAC;IAAA,CACJ;IAEO,KAAK,CAAC,YAAY,CACxB,KAA+B,EAC/B,OAAqB,EACG;QACxB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,4BAA4B;aACpC,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,MAAM,kBAAkB,GAAG,KAAK,CAAC,oBAAoB,CAAC;QACtD,IAAI,kBAAkB,EAAE,CAAC;YACvB,kBAAkB,EAAE,CAAC;QACvB,CAAC;QACD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,oBAAoB,GAAG,SAAS,CAAC;QACvC,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAC;QAEtC,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,QAAQ;SACf,CAAC;IAAA,CACH;IAEO,KAAK,CAAC,cAAc,CAC1B,KAA+B,EAC/B,OAAqB,EACG;QACxB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,4BAA4B;aACpC,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,MAAM,iBAAiB,GAAG,KAAK,CAAC,mBAAmB,CAAC;QACpD,IAAI,iBAAiB,EAAE,CAAC;YACtB,iBAAiB,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,oBAAoB,GAAG,SAAS,CAAC;QACvC,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAC;QAEtC,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,QAAQ;SACf,CAAC;IAAA,CACH;IAEO,KAAK,CAAC,WAAW,CACvB,KAA+B,EAC/B,OAAqB,EACG;QACxB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO;gBACL,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,mBAAmB;aAC3B,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAE/C,MAAM,MAAM,GAA4B,MAAM,iBAAiB,CAAC;YAC9D,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,GAAG,EAAE;gBACH,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB;YACD,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE;SACrC,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;IAAA,CACH;IAEO,cAAc,CAAC,KAA+B,EAAQ;QAC5D,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC;YAAE,OAAO;QAEpC,KAAK,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YACjC,wBAAwB;YACxB,IAAI,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAA,CAC3B,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAAA,CACxB;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,GAAkB;QAC9B,MAAM,QAAQ,GAAoB,EAAE,CAAC;QAErC,KAAK,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAAA,CAC7B;CACF"}

package/dist/proxy/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @syncular/server-hono - Proxy Exports
+ *
+ * WebSocket endpoint for admin database proxy.
+ */
+export * from './connection-manager';
+export * from './routes';
+//# sourceMappingURL=index.d.ts.map

package/dist/proxy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/proxy/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC"}

package/dist/proxy/index.js

@@ -0,0 +1,8 @@
+/**
+ * @syncular/server-hono - Proxy Exports
+ *
+ * WebSocket endpoint for admin database proxy.
+ */
+export * from './connection-manager';
+export * from './routes';
+//# sourceMappingURL=index.js.map

package/dist/proxy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/proxy/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC"}

package/dist/proxy/routes.d.ts

@@ -0,0 +1,74 @@
+/**
+ * @syncular/server-hono - Proxy Routes
+ *
+ * WebSocket endpoint for database proxy.
+ */
+import type { ProxyHandshake, ProxyMessage, ProxyResponse } from '@syncular/core';
+import type { ProxyTableRegistry, ServerSyncDialect, SyncCoreDb } from '@syncular/server';
+import type { Context } from 'hono';
+import { Hono } from 'hono';
+import type { UpgradeWebSocket, WSContext } from 'hono/ws';
+import type { Kysely } from 'kysely';
+/**
+ * WeakMap for storing proxy connection manager per Hono instance.
+ */
+interface ProxyConnectionManagerHandle {
+    canAccept(): boolean;
+    getConnectionCount(): number;
+    register(ws: WSContext, handshake: ProxyHandshake): unknown;
+    handleMessage(ws: WSContext, message: ProxyMessage): Promise<ProxyResponse>;
+    unregister(ws: WSContext): Promise<void>;
+}
+interface ProxyAuthResult {
+    /** Actor ID for oplog tracking */
+    actorId: string;
+}
+interface CreateProxyRoutesConfig<DB extends SyncCoreDb = SyncCoreDb> {
+    /** Database connection */
+    db: Kysely<DB>;
+    /** Server sync dialect */
+    dialect: ServerSyncDialect;
+    /** Proxy table registry for oplog generation */
+    shapes: ProxyTableRegistry;
+    /** Authenticate the request and return actor info */
+    authenticate: (c: Context) => Promise<ProxyAuthResult | null>;
+    /** WebSocket upgrade function from Hono */
+    upgradeWebSocket: UpgradeWebSocket;
+    /** Maximum concurrent connections (default: 100) */
+    maxConnections?: number;
+    /** Idle connection timeout in ms (default: 30000) */
+    idleTimeoutMs?: number;
+}
+/**
+ * Create Hono routes for the proxy WebSocket endpoint.
+ *
+ * @example
+ * ```typescript
+ * import { Hono } from 'hono';
+ * import { createBunWebSocket } from 'hono/bun';
+ * import { createProxyRoutes } from '@syncular/server-hono/proxy';
+ *
+ * const { upgradeWebSocket, websocket } = createBunWebSocket();
+ *
+ * const app = new Hono();
+ *
+ * app.route('/proxy', createProxyRoutes({
+ *   db,
+ *   shapes: proxyTableRegistry,
+ *   authenticate: async (c) => {
+ *     // Verify admin auth
+ *     return { actorId: 'admin:123' };
+ *   },
+ *   upgradeWebSocket,
+ * }));
+ *
+ * export default { fetch: app.fetch, websocket };
+ * ```
+ */
+export declare function createProxyRoutes<DB extends SyncCoreDb>(config: CreateProxyRoutesConfig<DB>): Hono;
+/**
+ * Get the ProxyConnectionManager from a proxy routes instance.
+ */
+export declare function getProxyConnectionManager(routes: Hono): ProxyConnectionManagerHandle | undefined;
+export {};
+//# sourceMappingURL=routes.d.ts.map

package/dist/proxy/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/proxy/routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,cAAc,EAEd,YAAY,EACZ,aAAa,EACd,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,UAAU,EACX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGrC;;GAEG;AACH,UAAU,4BAA4B;IACpC,SAAS,IAAI,OAAO,CAAC;IACrB,kBAAkB,IAAI,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,GAAG,OAAO,CAAC;IAC5D,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5E,UAAU,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAOD,UAAU,eAAe;IACvB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,uBAAuB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU;IAClE,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACf,0BAA0B;IAC1B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,gDAAgD;IAChD,MAAM,EAAE,kBAAkB,CAAC;IAC3B,qDAAqD;IACrD,YAAY,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAC9D,2CAA2C;IAC3C,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,SAAS,UAAU,EACrD,MAAM,EAAE,uBAAuB,CAAC,EAAE,CAAC,GAClC,IAAI,CA2HN;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,IAAI,GACX,4BAA4B,GAAG,SAAS,CAE1C"}

package/dist/proxy/routes.js

@@ -0,0 +1,147 @@
+/**
+ * @syncular/server-hono - Proxy Routes
+ *
+ * WebSocket endpoint for database proxy.
+ */
+import { logSyncEvent } from '@syncular/core';
+import { Hono } from 'hono';
+import { ProxyConnectionManager } from './connection-manager';
+const proxyConnectionManagerMap = new WeakMap();
+/**
+ * Create Hono routes for the proxy WebSocket endpoint.
+ *
+ * @example
+ * ```typescript
+ * import { Hono } from 'hono';
+ * import { createBunWebSocket } from 'hono/bun';
+ * import { createProxyRoutes } from '@syncular/server-hono/proxy';
+ *
+ * const { upgradeWebSocket, websocket } = createBunWebSocket();
+ *
+ * const app = new Hono();
+ *
+ * app.route('/proxy', createProxyRoutes({
+ *   db,
+ *   shapes: proxyTableRegistry,
+ *   authenticate: async (c) => {
+ *     // Verify admin auth
+ *     return { actorId: 'admin:123' };
+ *   },
+ *   upgradeWebSocket,
+ * }));
+ *
+ * export default { fetch: app.fetch, websocket };
+ * ```
+ */
+export function createProxyRoutes(config) {
+    const app = new Hono();
+    const manager = new ProxyConnectionManager({
+        db: config.db,
+        dialect: config.dialect,
+        shapes: config.shapes,
+        maxConnections: config.maxConnections,
+        idleTimeoutMs: config.idleTimeoutMs,
+    });
+    // Store manager for external access if needed
+    proxyConnectionManagerMap.set(app, manager);
+    // WebSocket upgrade endpoint - using regular route since WebSocket doesn't fit OpenAPI well
+    app.get('/', async (c) => {
+        // Authenticate before upgrade
+        const auth = await config.authenticate(c);
+        if (!auth) {
+            return c.json({ error: 'UNAUTHENTICATED' }, 401);
+        }
+        // Check connection limit
+        if (!manager.canAccept()) {
+            logSyncEvent({
+                event: 'proxy.rejected',
+                userId: auth.actorId,
+                reason: 'max_connections',
+            });
+            return c.json({ error: 'PROXY_CONNECTION_LIMIT' }, 429);
+        }
+        logSyncEvent({
+            event: 'proxy.connect',
+            userId: auth.actorId,
+        });
+        return config.upgradeWebSocket(c, {
+            onOpen(_evt, _ws) {
+                // Connection opened, wait for handshake message
+            },
+            async onMessage(evt, ws) {
+                try {
+                    const data = typeof evt.data === 'string'
+                        ? evt.data
+                        : new TextDecoder().decode(evt.data);
+                    const message = JSON.parse(data);
+                    // Handle handshake
+                    if (message.type === 'handshake') {
+                        const handshake = message;
+                        // Validate that the handshake actor matches authenticated actor
+                        if (handshake.actorId !== auth.actorId) {
+                            const ack = {
+                                type: 'handshake_ack',
+                                ok: false,
+                                error: 'Actor ID mismatch',
+                            };
+                            ws.send(JSON.stringify(ack));
+                            ws.close(4001, 'Unauthorized');
+                            return;
+                        }
+                        manager.register(ws, handshake);
+                        const ack = {
+                            type: 'handshake_ack',
+                            ok: true,
+                        };
+                        ws.send(JSON.stringify(ack));
+                        return;
+                    }
+                    // Handle proxy messages
+                    const proxyMessage = message;
+                    const response = await manager.handleMessage(ws, proxyMessage);
+                    ws.send(JSON.stringify(response));
+                }
+                catch (err) {
+                    // Send error response if we can parse the message ID
+                    try {
+                        const parsed = JSON.parse(typeof evt.data === 'string'
+                            ? evt.data
+                            : new TextDecoder().decode(evt.data));
+                        if (parsed.id) {
+                            ws.send(JSON.stringify({
+                                id: parsed.id,
+                                type: 'error',
+                                error: err instanceof Error ? err.message : 'Unknown error',
+                            }));
+                        }
+                    }
+                    catch {
+                        // Ignore parse errors
+                    }
+                }
+            },
+            async onClose(_evt, ws) {
+                await manager.unregister(ws);
+                logSyncEvent({
+                    event: 'proxy.disconnect',
+                    userId: auth.actorId,
+                });
+            },
+            async onError(_evt, ws) {
+                await manager.unregister(ws);
+                logSyncEvent({
+                    event: 'proxy.error',
+                    userId: auth.actorId,
+                });
+            },
+        });
+    });
+    return app;
+}
+/**
+ * Get the ProxyConnectionManager from a proxy routes instance.
+ */
+export function getProxyConnectionManager(routes) {
+    return proxyConnectionManagerMap.get(routes);
+}
+//# sourceMappingURL=routes.js.map

package/dist/proxy/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/proxy/routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAO9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAa9D,MAAM,yBAAyB,GAAG,IAAI,OAAO,EAG1C,CAAC;AAwBJ;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAmC,EAC7B;IACN,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC;QACzC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAC,CAAC;IAEH,8CAA8C;IAC9C,yBAAyB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAE5C,4FAA4F;IAC5F,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,8BAA8B;QAC9B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,yBAAyB;QACzB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACzB,YAAY,CAAC;gBACX,KAAK,EAAE,gBAAgB;gBACvB,MAAM,EAAE,IAAI,CAAC,OAAO;gBACpB,MAAM,EAAE,iBAAiB;aAC1B,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QAED,YAAY,CAAC;YACX,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,IAAI,CAAC,OAAO;SACrB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE;YAChC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBAChB,gDAAgD;YAD/B,CAElB;YAED,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE;gBACvB,IAAI,CAAC;oBACH,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAC1B,CAAC,CAAC,GAAG,CAAC,IAAI;wBACV,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAmB,CAAC,CAAC;oBAExD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAEjC,mBAAmB;oBACnB,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;wBACjC,MAAM,SAAS,GAAG,OAAyB,CAAC;wBAE5C,gEAAgE;wBAChE,IAAI,SAAS,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;4BACvC,MAAM,GAAG,GAAsB;gCAC7B,IAAI,EAAE,eAAe;gCACrB,EAAE,EAAE,KAAK;gCACT,KAAK,EAAE,mBAAmB;6BAC3B,CAAC;4BACF,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;4BAC7B,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;4BAC/B,OAAO;wBACT,CAAC;wBAED,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;wBAEhC,MAAM,GAAG,GAAsB;4BAC7B,IAAI,EAAE,eAAe;4BACrB,EAAE,EAAE,IAAI;yBACT,CAAC;wBACF,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;wBAC7B,OAAO;oBACT,CAAC;oBAED,wBAAwB;oBACxB,MAAM,YAAY,GAAG,OAAuB,CAAC;oBAC7C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;oBAC/D,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACpC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,qDAAqD;oBACrD,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;4BAC1B,CAAC,CAAC,GAAG,CAAC,IAAI;4BACV,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAmB,CAAC,CACtD,CAAC;wBACF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;4BACd,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;gCACb,EAAE,EAAE,MAAM,CAAC,EAAE;gCACb,IAAI,EAAE,OAAO;gCACb,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;6BAC5D,CAAC,CACH,CAAC;wBACJ,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,sBAAsB;oBACxB,CAAC;gBACH,CAAC;YAAA,CACF;YAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE;gBACtB,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBAC7B,YAAY,CAAC;oBACX,KAAK,EAAE,kBAAkB;oBACzB,MAAM,EAAE,IAAI,CAAC,OAAO;iBACrB,CAAC,CAAC;YAAA,CACJ;YAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE;gBACtB,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBAC7B,YAAY,CAAC;oBACX,KAAK,EAAE,aAAa;oBACpB,MAAM,EAAE,IAAI,CAAC,OAAO;iBACrB,CAAC,CAAC;YAAA,CACJ;SACF,CAAC,CAAC;IAAA,CACJ,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AAAA,CACZ;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAY,EAC8B;IAC1C,OAAO,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAAA,CAC9C"}

package/dist/rate-limit.d.ts

@@ -0,0 +1,101 @@
+/**
+ * @syncular/server-hono - Rate limiting middleware for sync endpoints
+ *
+ * Provides per-user rate limiting to prevent DoS attacks and excessive
+ * server load from misbehaving clients.
+ */
+import type { Context, MiddlewareHandler } from 'hono';
+/**
+ * Rate limit configuration
+ */
+export interface RateLimitConfig {
+    /**
+     * Maximum requests per window (default: 60)
+     */
+    maxRequests: number;
+    /**
+     * Time window in milliseconds (default: 60000 = 1 minute)
+     */
+    windowMs: number;
+    /**
+     * Function to extract the rate limit key from a request.
+     * Typically returns userId, deviceId, or IP address.
+     * Return null to skip rate limiting for this request.
+     */
+    keyGenerator: (c: Context) => string | null | Promise<string | null>;
+    /**
+     * Whether to include rate limit headers in responses (default: true)
+     */
+    includeHeaders?: boolean;
+    /**
+     * Custom handler for rate-limited requests (optional)
+     * If not provided, returns a 429 JSON response
+     */
+    onRateLimited?: (c: Context, retryAfterMs: number) => Response | Promise<Response>;
+    /**
+     * Whether to skip rate limiting in test environments (default: false)
+     */
+    skipInTest?: boolean;
+}
+/**
+ * Reset the global store (for testing)
+ */
+export declare function resetRateLimitStore(): void;
+/**
+ * Create a rate limiting middleware for Hono.
+ *
+ * @example
+ * ```typescript
+ * import { createRateLimiter } from '@syncular/server-hono';
+ *
+ * const rateLimiter = createRateLimiter({
+ *   maxRequests: 60,
+ *   windowMs: 60_000,
+ *   keyGenerator: async (c) => {
+ *     const auth = await authenticate(c);
+ *     return auth?.userId ?? null;
+ *   },
+ * });
+ *
+ * app.use('/sync/*', rateLimiter);
+ * ```
+ */
+export declare function createRateLimiter(config: Partial<RateLimitConfig> & Pick<RateLimitConfig, 'keyGenerator'>): MiddlewareHandler;
+/**
+ * Create a rate limiter that uses userId from auth context.
+ *
+ * This is a convenience function for the common case of rate limiting
+ * by authenticated user.
+ *
+ * @example
+ * ```typescript
+ * const syncRoutes = createSyncRoutes({
+ *   db,
+ *   handlers: [tasksHandler],
+ *   authenticate,
+ *   sync: {
+ *     rateLimit: {
+ *       pull: { maxRequests: 120, windowMs: 60_000 },
+ *       push: { maxRequests: 60, windowMs: 60_000 },
+ *     },
+ *   },
+ * });
+ * ```
+ */
+export interface SyncRateLimitConfig {
+    /**
+     * Rate limit config for pull requests.
+     * Set to false to disable rate limiting for pulls.
+     */
+    pull?: Omit<RateLimitConfig, 'keyGenerator'> | false;
+    /**
+     * Rate limit config for push requests.
+     * Set to false to disable rate limiting for pushes.
+     */
+    push?: Omit<RateLimitConfig, 'keyGenerator'> | false;
+}
+/**
+ * Default sync rate limit configuration
+ */
+export declare const DEFAULT_SYNC_RATE_LIMITS: SyncRateLimitConfig;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAErE;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB;;;OAGG;IACH,aAAa,CAAC,EAAE,CACd,CAAC,EAAE,OAAO,EACV,YAAY,EAAE,MAAM,KACjB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAElC;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAwHD;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAK1C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,GACvE,iBAAiB,CAqEnB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,GAAG,KAAK,CAAC;IAErD;;;OAGG;IACH,IAAI,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,GAAG,KAAK,CAAC;CACtD;AAED;;GAEG;AACH,eAAO,MAAM,wBAAwB,EAAE,mBAWtC,CAAC"}