@syncular/server-hono 0.0.6-158 → 0.0.6-165

package/dist/console/routes.js

@@ -15,13 +15,15 @@
  * - DELETE /clients/:id   - Evict client
  */
 import { logSyncEvent } from '@syncular/core';
-import { compactChanges, computePruneWatermarkCommitSeq, notifyExternalDataChange, pruneSync, readSyncStats, } from '@syncular/server';
+import { coerceNumber, compactChanges, computePruneWatermarkCommitSeq, notifyExternalDataChange, parseJsonValue, pruneSync, readSyncStats, } from '@syncular/server';
 import { Hono } from 'hono';
 import { cors } from 'hono/cors';
-import { describeRoute, resolver, validator as zValidator } from 'hono-openapi';
+import { resolver, validator as zValidator } from 'hono-openapi';
 import { sql } from 'kysely';
 import { z } from 'zod';
 import { closeUnauthenticatedSocket, parseBearerToken, parseWebSocketAuthToken, } from './live-auth.js';
+import { describeConsoleRoute } from './route-descriptor.js';
+import { isBenignConsoleSchemaError } from './schema-errors.js';
 import { ApiKeyTypeSchema, ConsoleApiKeyBulkRevokeRequestSchema, ConsoleApiKeyBulkRevokeResponseSchema, ConsoleApiKeyCreateRequestSchema, ConsoleApiKeyCreateResponseSchema, ConsoleApiKeyRevokeResponseSchema, ConsoleApiKeySchema, ConsoleBlobDeleteResponseSchema, ConsoleBlobListQuerySchema, ConsoleBlobListResponseSchema, ConsoleClearEventsResultSchema, ConsoleClientSchema, ConsoleCommitDetailSchema, ConsoleCommitListItemSchema, ConsoleCompactResultSchema, ConsoleEvictResultSchema, ConsoleHandlerSchema, ConsoleOperationEventSchema, ConsoleOperationsQuerySchema, ConsolePaginatedResponseSchema, ConsolePaginationQuerySchema, ConsolePartitionedPaginationQuerySchema, ConsolePartitionQuerySchema, ConsolePruneEventsResultSchema, ConsolePrunePreviewSchema, ConsolePruneResultSchema, ConsoleRequestEventSchema, ConsoleRequestPayloadSchema, ConsoleTimelineItemSchema, ConsoleTimelineQuerySchema, LatencyQuerySchema, LatencyStatsResponseSchema, SyncStatsSchema, TimeseriesQuerySchema, TimeseriesStatsResponseSchema, } from './schemas.js';
 /**
  * Create a simple console event emitter for broadcasting live events.
@@ -79,19 +81,6 @@ export function createConsoleEventEmitter(options) {
         },
     };
 }
-function coerceNumber(value) {
-    if (value === null || value === undefined)
-        return null;
-    if (typeof value === 'number')
-        return Number.isFinite(value) ? value : null;
-    if (typeof value === 'bigint')
-        return Number.isFinite(Number(value)) ? Number(value) : null;
-    if (typeof value === 'string') {
-        const n = Number(value);
-        return Number.isFinite(n) ? n : null;
-    }
-    return null;
-}
 function parseDate(value) {
     if (!value)
         return null;
@@ -105,17 +94,18 @@ function includesSearchTerm(value, searchTerm) {
         return false;
     return value.toLowerCase().includes(searchTerm);
 }
-function parseJsonValue(value) {
-    if (value === null || value === undefined)
-        return null;
-    if (typeof value !== 'string')
-        return value;
-    try {
-        return JSON.parse(value);
-    }
-    catch {
-        return value;
+function parseJsonRecord(value) {
+    const parsed = parseJsonValue(value);
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        return {};
     }
+    return parsed;
+}
+function parseJsonStringArray(value) {
+    const parsed = parseJsonValue(value);
+    if (!Array.isArray(parsed))
+        return [];
+    return parsed.filter((entry) => typeof entry === 'string');
 }
 function parseScopesSummary(value) {
     const parsed = parseJsonValue(value);
@@ -267,6 +257,7 @@ const DEFAULT_REQUEST_EVENTS_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1000;
 const DEFAULT_REQUEST_EVENTS_MAX_ROWS = 10_000;
 const DEFAULT_OPERATION_EVENTS_MAX_AGE_MS = 30 * 24 * 60 * 60 * 1000;
 const DEFAULT_OPERATION_EVENTS_MAX_ROWS = 5_000;
+const DEFAULT_TIMELINE_SCAN_MAX_ROWS = 10_000;
 const DEFAULT_AUTO_EVENTS_PRUNE_INTERVAL_MS = 5 * 60 * 1000;
 function readNonNegativeInteger(value, fallback) {
     if (typeof value !== 'number' || !Number.isFinite(value)) {
@@ -294,12 +285,16 @@ export function createConsoleRoutes(options) {
     const requestEventsMaxRows = readNonNegativeInteger(options.maintenance?.requestEventsMaxRows, DEFAULT_REQUEST_EVENTS_MAX_ROWS);
     const operationEventsMaxAgeMs = readNonNegativeInteger(options.maintenance?.operationEventsMaxAgeMs, DEFAULT_OPERATION_EVENTS_MAX_AGE_MS);
     const operationEventsMaxRows = readNonNegativeInteger(options.maintenance?.operationEventsMaxRows, DEFAULT_OPERATION_EVENTS_MAX_ROWS);
+    const timelineScanMaxRows = readNonNegativeInteger(options.maintenance?.timelineScanMaxRows, DEFAULT_TIMELINE_SCAN_MAX_ROWS);
     const autoEventsPruneIntervalMs = readNonNegativeInteger(options.maintenance?.autoPruneIntervalMs, DEFAULT_AUTO_EVENTS_PRUNE_INTERVAL_MS);
     let lastEventsPruneRunAt = 0;
     // Ensure console schema exists before handlers query console tables.
     const consoleSchemaReadyPromise = (options.consoleSchemaReady ??
         options.dialect.ensureConsoleSchema?.(options.db) ??
         Promise.resolve()).catch((err) => {
+        if (isBenignConsoleSchemaError(err)) {
+            return;
+        }
         console.error('[console] Failed to ensure console schema:', err);
         throw err;
     });
@@ -630,8 +625,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /stats
     // -------------------------------------------------------------------------
-    routes.get('/stats', describeRoute({
-        tags: ['console'],
+    routes.get('/stats', describeConsoleRoute({
         summary: 'Get sync statistics',
         responses: {
             200: {
@@ -661,8 +655,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /stats/timeseries
     // -------------------------------------------------------------------------
-    routes.get('/stats/timeseries', describeRoute({
-        tags: ['console'],
+    routes.get('/stats/timeseries', describeConsoleRoute({
         summary: 'Get time-series statistics',
         responses: {
             200: {
@@ -819,8 +812,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /stats/latency
     // -------------------------------------------------------------------------
-    routes.get('/stats/latency', describeRoute({
-        tags: ['console'],
+    routes.get('/stats/latency', describeConsoleRoute({
         summary: 'Get latency percentiles',
         responses: {
             200: {
@@ -907,8 +899,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /timeline
     // -------------------------------------------------------------------------
-    routes.get('/timeline', describeRoute({
-        tags: ['console'],
+    routes.get('/timeline', describeConsoleRoute({
         summary: 'List timeline items',
         responses: {
             200: {
@@ -931,6 +922,8 @@ export function createConsoleRoutes(options) {
         const items = [];
         const normalizedSearchTerm = search?.trim().toLowerCase() || null;
         const normalizedTable = table?.trim() || null;
+        const timelineSourceScanLimit = timelineScanMaxRows > 0 ? timelineScanMaxRows : null;
+        let timelineTruncated = false;
         if (view !== 'events' &&
             !eventType &&
             !outcome &&
@@ -962,8 +955,19 @@ export function createConsoleRoutes(options) {
             if (to) {
                 commitsQuery = commitsQuery.where('created_at', '<=', to);
             }
-            const commitRows = await commitsQuery.execute();
-            for (const row of commitRows) {
+            let commitsQueryWithOrdering = commitsQuery.orderBy('created_at', 'desc');
+            if (timelineSourceScanLimit !== null) {
+                commitsQueryWithOrdering = commitsQueryWithOrdering.limit(timelineSourceScanLimit + 1);
+            }
+            const commitRows = await commitsQueryWithOrdering.execute();
+            const scannedCommitRows = timelineSourceScanLimit === null
+                ? commitRows
+                : commitRows.slice(0, timelineSourceScanLimit);
+            if (timelineSourceScanLimit !== null &&
+                commitRows.length > timelineSourceScanLimit) {
+                timelineTruncated = true;
+            }
+            for (const row of scannedCommitRows) {
                 const commit = {
                     commitSeq: coerceNumber(row.commit_seq) ?? 0,
                     actorId: row.actor_id ?? '',
@@ -1012,8 +1016,19 @@ export function createConsoleRoutes(options) {
             if (to) {
                 eventsQuery = eventsQuery.where('created_at', '<=', to);
             }
-            const eventRows = await eventsQuery.execute();
-            for (const row of eventRows) {
+            let eventsQueryWithOrdering = eventsQuery.orderBy('created_at', 'desc');
+            if (timelineSourceScanLimit !== null) {
+                eventsQueryWithOrdering = eventsQueryWithOrdering.limit(timelineSourceScanLimit + 1);
+            }
+            const eventRows = await eventsQueryWithOrdering.execute();
+            const scannedEventRows = timelineSourceScanLimit === null
+                ? eventRows
+                : eventRows.slice(0, timelineSourceScanLimit);
+            if (timelineSourceScanLimit !== null &&
+                eventRows.length > timelineSourceScanLimit) {
+                timelineTruncated = true;
+            }
+            for (const row of scannedEventRows) {
                 const event = mapRequestEvent(row);
                 items.push({
                     type: 'event',
@@ -1076,13 +1091,18 @@ export function createConsoleRoutes(options) {
             limit,
         };
         c.header('X-Total-Count', String(total));
+        if (timelineTruncated) {
+            c.header('X-Timeline-Truncated', 'true');
+            if (timelineSourceScanLimit !== null) {
+                c.header('X-Timeline-Scan-Limit', String(timelineSourceScanLimit));
+            }
+        }
         return c.json(response, 200);
     });
     // -------------------------------------------------------------------------
     // GET /commits
     // -------------------------------------------------------------------------
-    routes.get('/commits', describeRoute({
-        tags: ['console'],
+    routes.get('/commits', describeConsoleRoute({
         summary: 'List commits',
         responses: {
             200: {
@@ -1150,8 +1170,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /commits/:seq
     // -------------------------------------------------------------------------
-    routes.get('/commits/:seq', describeRoute({
-        tags: ['console'],
+    routes.get('/commits/:seq', describeConsoleRoute({
         summary: 'Get commit details',
         responses: {
             200: {
@@ -1224,20 +1243,9 @@ export function createConsoleRoutes(options) {
             table: row.table ?? '',
             rowId: row.row_id ?? '',
             op: row.op === 'delete' ? 'delete' : 'upsert',
-            rowJson: typeof row.row_json === 'string'
-                ? (() => {
-                    try {
-                        return JSON.parse(row.row_json);
-                    }
-                    catch {
-                        return row.row_json;
-                    }
-                })()
-                : row.row_json,
+            rowJson: parseJsonValue(row.row_json),
             rowVersion: coerceNumber(row.row_version),
-            scopes: typeof row.scopes === 'string'
-                ? JSON.parse(row.scopes || '{}')
-                : (row.scopes ?? {}),
+            scopes: parseJsonRecord(row.scopes),
         }));
         const commit = {
             commitSeq: coerceNumber(commitRow.commit_seq) ?? 0,
@@ -1246,11 +1254,7 @@ export function createConsoleRoutes(options) {
             clientCommitId: commitRow.client_commit_id ?? '',
             createdAt: commitRow.created_at ?? '',
             changeCount: coerceNumber(commitRow.change_count) ?? 0,
-            affectedTables: Array.isArray(commitRow.affected_tables)
-                ? commitRow.affected_tables
-                : typeof commitRow.affected_tables === 'string'
-                    ? JSON.parse(commitRow.affected_tables || '[]')
-                    : [],
+            affectedTables: parseJsonStringArray(commitRow.affected_tables),
             changes,
         };
         return c.json(commit, 200);
@@ -1258,8 +1262,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /clients
     // -------------------------------------------------------------------------
-    routes.get('/clients', describeRoute({
-        tags: ['console'],
+    routes.get('/clients', describeConsoleRoute({
         summary: 'List clients',
         responses: {
             200: {
@@ -1385,8 +1388,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /handlers
     // -------------------------------------------------------------------------
-    routes.get('/handlers', describeRoute({
-        tags: ['console'],
+    routes.get('/handlers', describeConsoleRoute({
         summary: 'List registered handlers',
         responses: {
             200: {
@@ -1413,8 +1415,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /operations - Operation audit log
     // -------------------------------------------------------------------------
-    routes.get('/operations', describeRoute({
-        tags: ['console'],
+    routes.get('/operations', describeConsoleRoute({
         summary: 'List operation audit events',
         responses: {
             200: {
@@ -1470,8 +1471,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // POST /prune/preview
     // -------------------------------------------------------------------------
-    routes.post('/prune/preview', describeRoute({
-        tags: ['console'],
+    routes.post('/prune/preview', describeConsoleRoute({
         summary: 'Preview pruning',
         responses: {
             200: {
@@ -1505,8 +1505,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // POST /prune
     // -------------------------------------------------------------------------
-    routes.post('/prune', describeRoute({
-        tags: ['console'],
+    routes.post('/prune', describeConsoleRoute({
         summary: 'Trigger pruning',
         responses: {
             200: {
@@ -1549,8 +1548,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // POST /compact
     // -------------------------------------------------------------------------
-    routes.post('/compact', describeRoute({
-        tags: ['console'],
+    routes.post('/compact', describeConsoleRoute({
         summary: 'Trigger compaction',
         responses: {
             200: {
@@ -1601,8 +1599,7 @@ export function createConsoleRoutes(options) {
         tables: z.array(z.string()),
         deletedChunks: z.number(),
     });
-    routes.post('/notify-data-change', describeRoute({
-        tags: ['console'],
+    routes.post('/notify-data-change', describeConsoleRoute({
         summary: 'Notify external data change',
         description: 'Creates a synthetic commit to force re-bootstrap for affected tables. ' +
             'Use after pipeline imports or direct DB writes to notify connected clients.',
@@ -1662,8 +1659,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // DELETE /clients/:id
     // -------------------------------------------------------------------------
-    routes.delete('/clients/:id', describeRoute({
-        tags: ['console'],
+    routes.delete('/clients/:id', describeConsoleRoute({
         summary: 'Evict client',
         responses: {
             200: {
@@ -1716,8 +1712,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /events - Paginated request events list
     // -------------------------------------------------------------------------
-    routes.get('/events', describeRoute({
-        tags: ['console'],
+    routes.get('/events', describeConsoleRoute({
         summary: 'List request events',
         responses: {
             200: {
@@ -1800,6 +1795,9 @@ export function createConsoleRoutes(options) {
         const emitter = options.eventEmitter;
         const upgradeWebSocket = options.websocket.upgradeWebSocket;
         const heartbeatIntervalMs = options.websocket.heartbeatIntervalMs ?? 30000;
+        const maxMessageBytes = options.websocket.maxMessageBytes ?? 1024 * 1024;
+        const maxMessagesPerWindow = options.websocket.maxMessagesPerWindow ?? 120;
+        const messageRateWindowMs = options.websocket.messageRateWindowMs ?? 10000;
         const wsState = new WeakMap();
         const cleanup = (ws) => {
             const state = wsState.get(ws);
@@ -1816,7 +1814,7 @@ export function createConsoleRoutes(options) {
             }
             wsState.delete(ws);
         };
-        routes.get('/events/live', upgradeWebSocket(async (c) => {
+        const liveEventsWebSocketRoute = upgradeWebSocket(async (c) => {
             const authHeader = c.req.header('Authorization');
             const partitionId = c.req.query('partitionId')?.trim() || undefined;
             const replaySince = c.req.query('since');
@@ -1854,6 +1852,8 @@ export function createConsoleRoutes(options) {
                         authTimeout: null,
                         isAuthenticated: false,
                         startAuthenticatedSession: null,
+                        messageRateWindowStart: Date.now(),
+                        messageRateWindowCount: 0,
                     };
                     wsState.set(ws, state);
                     const startAuthenticatedSession = () => {
@@ -1928,7 +1928,29 @@ export function createConsoleRoutes(options) {
                 },
                 async onMessage(event, ws) {
                     const state = wsState.get(ws);
-                    if (!state || state.isAuthenticated) {
+                    if (!state) {
+                        return;
+                    }
+                    const messageBytes = measureWebSocketMessageBytes(event.data);
+                    if (messageBytes > maxMessageBytes) {
+                        ws.close(1009, 'message too large');
+                        cleanup(ws);
+                        return;
+                    }
+                    if (maxMessagesPerWindow > 0 && messageRateWindowMs > 0) {
+                        const nowMs = Date.now();
+                        if (nowMs - state.messageRateWindowStart >= messageRateWindowMs) {
+                            state.messageRateWindowStart = nowMs;
+                            state.messageRateWindowCount = 0;
+                        }
+                        state.messageRateWindowCount += 1;
+                        if (state.messageRateWindowCount > maxMessagesPerWindow) {
+                            ws.close(1008, 'message rate exceeded');
+                            cleanup(ws);
+                            return;
+                        }
+                    }
+                    if (state.isAuthenticated) {
                         return;
                     }
                     if (typeof event.data !== 'string') {
@@ -1961,13 +1983,18 @@ export function createConsoleRoutes(options) {
                     cleanup(ws);
                 },
             };
-        }));
+        });
+        routes.get('/events/live', async (c, next) => {
+            if (!isWebSocketOriginAllowed(c, options.websocket?.allowedOrigins)) {
+                return c.json({ error: 'FORBIDDEN_ORIGIN' }, 403);
+            }
+            return liveEventsWebSocketRoute(c, next);
+        });
     }
     // -------------------------------------------------------------------------
     // GET /events/:id - Single event detail
     // -------------------------------------------------------------------------
-    routes.get('/events/:id', describeRoute({
-        tags: ['console'],
+    routes.get('/events/:id', describeConsoleRoute({
         summary: 'Get event details',
         responses: {
             200: {
@@ -2016,8 +2043,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /events/:id/payload - payload snapshot detail (if retained)
     // -------------------------------------------------------------------------
-    routes.get('/events/:id/payload', describeRoute({
-        tags: ['console'],
+    routes.get('/events/:id/payload', describeConsoleRoute({
         summary: 'Get event payload snapshot',
         responses: {
             200: {
@@ -2092,8 +2118,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // DELETE /events - Clear all events
     // -------------------------------------------------------------------------
-    routes.delete('/events', describeRoute({
-        tags: ['console'],
+    routes.delete('/events', describeConsoleRoute({
         summary: 'Clear all events',
         responses: {
             200: {
@@ -2127,8 +2152,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // POST /events/prune - Prune old events
     // -------------------------------------------------------------------------
-    routes.post('/events/prune', describeRoute({
-        tags: ['console'],
+    routes.post('/events/prune', describeConsoleRoute({
         summary: 'Prune old events',
         responses: {
             200: {
@@ -2163,8 +2187,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /api-keys - List all API keys
     // -------------------------------------------------------------------------
-    routes.get('/api-keys', describeRoute({
-        tags: ['console'],
+    routes.get('/api-keys', describeConsoleRoute({
         summary: 'List API keys',
         responses: {
             200: {
@@ -2263,8 +2286,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // POST /api-keys - Create new API key
     // -------------------------------------------------------------------------
-    routes.post('/api-keys', describeRoute({
-        tags: ['console'],
+    routes.post('/api-keys', describeConsoleRoute({
         summary: 'Create API key',
         responses: {
             201: {
@@ -2346,8 +2368,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // GET /api-keys/:id - Get single API key
     // -------------------------------------------------------------------------
-    routes.get('/api-keys/:id', describeRoute({
-        tags: ['console'],
+    routes.get('/api-keys/:id', describeConsoleRoute({
         summary: 'Get API key',
         responses: {
             200: {
@@ -2407,8 +2428,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // DELETE /api-keys/:id - Revoke API key (soft delete)
     // -------------------------------------------------------------------------
-    routes.delete('/api-keys/:id', describeRoute({
-        tags: ['console'],
+    routes.delete('/api-keys/:id', describeConsoleRoute({
         summary: 'Revoke API key',
         responses: {
             200: {
@@ -2447,8 +2467,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // POST /api-keys/bulk-revoke - Revoke multiple API keys
     // -------------------------------------------------------------------------
-    routes.post('/api-keys/bulk-revoke', describeRoute({
-        tags: ['console'],
+    routes.post('/api-keys/bulk-revoke', describeConsoleRoute({
         summary: 'Bulk revoke API keys',
         responses: {
             200: {
@@ -2534,8 +2553,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // POST /api-keys/:id/rotate/stage - Stage rotate API key (keep old active)
     // -------------------------------------------------------------------------
-    routes.post('/api-keys/:id/rotate/stage', describeRoute({
-        tags: ['console'],
+    routes.post('/api-keys/:id/rotate/stage', describeConsoleRoute({
         summary: 'Stage rotate API key',
         responses: {
             200: {
@@ -2627,8 +2645,7 @@ export function createConsoleRoutes(options) {
     // -------------------------------------------------------------------------
     // POST /api-keys/:id/rotate - Rotate API key
     // -------------------------------------------------------------------------
-    routes.post('/api-keys/:id/rotate', describeRoute({
-        tags: ['console'],
+    routes.post('/api-keys/:id/rotate', describeConsoleRoute({
         summary: 'Rotate API key',
         responses: {
             200: {
@@ -2729,8 +2746,7 @@ export function createConsoleRoutes(options) {
     // Storage endpoints
     // -----------------------------------------------------------------------
     const bucket = options.blobBucket;
-    routes.get('/storage', describeRoute({
-        tags: ['console'],
+    routes.get('/storage', describeConsoleRoute({
         summary: 'List storage items',
         responses: {
             200: {
@@ -2771,8 +2787,7 @@ export function createConsoleRoutes(options) {
             cursor: listed.cursor ?? null,
         }, 200);
     });
-    routes.get('/storage/:key{.+}/download', describeRoute({
-        tags: ['console'],
+    routes.get('/storage/:key{.+}/download', describeConsoleRoute({
         summary: 'Download a storage item',
         responses: {
             200: { description: 'Storage item contents' },
@@ -2808,8 +2823,7 @@ export function createConsoleRoutes(options) {
             headers,
         });
     });
-    routes.delete('/storage/:key{.+}', describeRoute({
-        tags: ['console'],
+    routes.delete('/storage/:key{.+}', describeConsoleRoute({
         summary: 'Delete a storage item',
         responses: {
             200: {
@@ -2837,6 +2851,37 @@ export function createConsoleRoutes(options) {
     });
     return routes;
 }
+function isWebSocketOriginAllowed(c, allowedOrigins) {
+    if (!allowedOrigins)
+        return true;
+    if (allowedOrigins === '*')
+        return true;
+    const origin = c.req.header('origin');
+    if (!origin)
+        return false;
+    try {
+        const normalizedOrigin = new URL(origin).origin;
+        return allowedOrigins.includes(normalizedOrigin);
+    }
+    catch {
+        return false;
+    }
+}
+function measureWebSocketMessageBytes(data) {
+    if (typeof data === 'string') {
+        return new TextEncoder().encode(data).byteLength;
+    }
+    if (data instanceof ArrayBuffer) {
+        return data.byteLength;
+    }
+    if (ArrayBuffer.isView(data)) {
+        return data.byteLength;
+    }
+    if (typeof Blob !== 'undefined' && data instanceof Blob) {
+        return data.size;
+    }
+    return new TextEncoder().encode(String(data)).byteLength;
+}
 // ===========================================================================
 // API Key Utilities
 // ===========================================================================