wse-server 2.3.2__tar.gz → 2.4.1__tar.gz

{wse_server-2.3.2 → wse_server-2.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: wse-server
-Version: 2.3.2
+Version: 2.4.1
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
@@ -80,7 +80,7 @@ High-performance WebSocket server built in Rust with native clustering, E2E encr
 |---------|---------|
 | **Key exchange** | ECDH P-256 (per-connection keypair, automatic during handshake) |
 | **Encryption** | AES-GCM-256 with unique 12-byte IV per message |
-| **Key derivation** | HKDF-SHA256 (salt: `wse-encryption`, info: `aes-gcm-key`) |
+| **Key derivation** | HKDF-SHA256 (no salt, info: `wse-encryption/aes-gcm-key`) |
 | **Wire format** | `E:` prefix + 12-byte IV + AES-GCM ciphertext + 16-byte auth tag |
 | **Key rotation** | Configurable rotation interval (default 1 hour), automatic renegotiation |
 | **Replay prevention** | Nonce cache (10K entries, 5-minute TTL) on the client side |
@@ -122,6 +122,7 @@ High-performance WebSocket server built in Rust with native clustering, E2E encr
 | **Memory management** | Global budget (default 256 MB), TTL eviction, LRU eviction when over budget |
 | **Zero-copy storage** | Recovery entries share `Bytes` (Arc) with the broadcast path |
 | **Recovery on reconnect** | `subscribe_with_recovery()` replays missed messages automatically |
+| **Per-message stamp** | When recovery is enabled, every topic broadcast carries `tp`/`e`/`o` (topic, epoch, offset) so clients dedup idempotently and detect gaps from the messages themselves |
 
 ### Client SDKs (Python + TypeScript/React)
 
@@ -132,8 +133,8 @@ High-performance WebSocket server built in Rust with native clustering, E2E encr
 | **Circuit breaker** | CLOSED/OPEN/HALF_OPEN state machine, prevents connection storms |
 | **Rate limiting** | Client-side token bucket, coordinates with server feedback |
 | **E2E encryption** | Wire-compatible AES-GCM-256 + ECDH P-256 (both clients speak the same protocol) |
-| **Event sequencing** | Duplicate detection (sliding window) + out-of-order buffering |
-| **Network monitor** | Real-time latency, jitter, packet loss measurement, quality scoring |
+| **Event sequencing** | Duplicate detection (sliding window) + per-topic `(epoch, offset)` idempotent dedup with automatic gap recovery |
+| **Network monitor** | Real-time latency, jitter, and connection-quality scoring (Python client also estimates packet loss) |
 | **Priority queues** | 5 levels from CRITICAL to BACKGROUND |
 | **Offline queue** | IndexedDB persistence (TypeScript), replayed on reconnect |
 | **Compression** | Automatic zlib for messages above threshold |
@@ -146,8 +147,11 @@ High-performance WebSocket server built in Rust with native clustering, E2E encr
 |---------|---------|
 | **Origin validation** | Configure in reverse proxy (nginx/Caddy) to prevent CSWSH |
 | **Cookie auth** | `access_token` HTTP-only cookie with `Secure + SameSite=Lax` (OWASP recommended for browsers) |
-| **Frame protection** | 1 MB max frame size, serde_json parsing (no eval), escaped user IDs in server_ready |
+| **Frame protection** | 1 MB max frame size, serde_json parsing (no eval), escaped user IDs in server_ready; inbound msgpack rejected beyond 64 nesting levels |
 | **Cluster frame protection** | zstd decompression output capped at 1 MB (MAX_FRAME_SIZE), protocol version validation |
+| **Slowloris protection** | At most 512 concurrent pre-handshake connections; sockets that never complete the WS upgrade are bounded and dropped |
+| **Bounded callback dispatch** | Callback mode caps in-flight `on_message` callbacks at 256 per connection; excess inbound work is shed and counted as rate-limited |
+| **Fail-closed recovery ACL** | Recovery replay applies the connection's topic ACL — unauthorized topics are never replayed or position-probed |
 
 ---
 
@@ -359,10 +363,10 @@ result = server.subscribe_with_recovery(
     epoch=client_epoch,       # From previous session
     offset=client_offset,     # From previous session
 )
-# {"topics": {"prices": {"epoch": 123, "offset": 456, "recovered": True, "count": 12}}}
+# {"topics": {"prices": {"epoch": "0000007b", "offset": 456, "recovered": True, "count": 12}}}
 ```
 
-The server maintains per-topic ring buffers (power-of-2 capacity, bitmask indexing). Clients store the `epoch` and `offset` from their last received message. On reconnect, the server replays missed messages from the ring buffer. If the gap is too large or the epoch has changed, the client receives a `NotRecovered` status and should re-subscribe from scratch.
+The server maintains per-topic ring buffers (power-of-2 capacity, bitmask indexing). When recovery is enabled, every topic broadcast is stamped with `tp`/`e`/`o` (topic, epoch, offset) fields, so clients track their per-topic position from the messages themselves, drop duplicates idempotently by `(epoch, offset)`, and automatically request recovery when they detect an offset gap. On reconnect, the server replays missed messages from the ring buffer. If the gap is too large or the epoch has changed, the client receives a `NotRecovered` status and should re-subscribe from scratch.
 
 Memory is managed with a global budget (default 256 MB), TTL eviction for idle buffers, and LRU eviction when over budget.
 
@@ -543,7 +547,7 @@ def handle(event):
 client.run_forever()
 ```
 
-Key features: 4 reconnect strategies (exponential, linear, fibonacci, adaptive), connection pool with health scoring and 3 load balancing strategies, circuit breaker, token bucket rate limiter, event sequencer with dedup and reorder buffering, network quality monitoring (latency/jitter/packet loss).
+Key features: 4 reconnect strategies (exponential, linear, fibonacci, adaptive), connection pool with health scoring and 3 load balancing strategies, circuit breaker, token bucket rate limiter, event sequencer with id dedup plus per-topic `(epoch, offset)` idempotent dedup and gap recovery, network quality monitoring (latency/jitter/packet loss).
 
 See [python-client/](python-client/) for full source and examples.
 
@@ -571,7 +575,7 @@ function App() {
 
 Key features: offline queue with IndexedDB persistence, adaptive quality management, connection pool with health scoring, E2E encryption (Web Crypto API), message batching, 5 priority levels, Zustand store for external state access.
 
-See [client/](client/) for full source and examples.
+See [ts-client/](ts-client/) for full source and examples.
 
 ---
 
@@ -614,7 +618,7 @@ Working examples in the [`examples/`](examples/) directory:
 - [Rust Utilities](docs/RUST_UTILITIES.md) - priority queues, rate limiters, sequencing, compression, crypto, JWT
 - [Security](docs/SECURITY.md) - JWT, encryption, mTLS, rate limiting, circuit breaker
 - [Deployment](docs/DEPLOYMENT.md) - production setup, Docker, Kubernetes, cluster configuration
-- [Migration Guide](docs/MIGRATION.md) - upgrading from v1.x to v2.0
+- [Migration Guide](docs/MIGRATION.md) - upgrading from v1.x to v2.x
 - [Contributing](CONTRIBUTING.md) - development setup and coding standards
 - [Changelog](CHANGELOG.md) - version history
 

{wse_server-2.3.2 → wse_server-2.4.1}/README.md

@@ -39,7 +39,7 @@ High-performance WebSocket server built in Rust with native clustering, E2E encr
 |---------|---------|
 | **Key exchange** | ECDH P-256 (per-connection keypair, automatic during handshake) |
 | **Encryption** | AES-GCM-256 with unique 12-byte IV per message |
-| **Key derivation** | HKDF-SHA256 (salt: `wse-encryption`, info: `aes-gcm-key`) |
+| **Key derivation** | HKDF-SHA256 (no salt, info: `wse-encryption/aes-gcm-key`) |
 | **Wire format** | `E:` prefix + 12-byte IV + AES-GCM ciphertext + 16-byte auth tag |
 | **Key rotation** | Configurable rotation interval (default 1 hour), automatic renegotiation |
 | **Replay prevention** | Nonce cache (10K entries, 5-minute TTL) on the client side |
@@ -81,6 +81,7 @@ High-performance WebSocket server built in Rust with native clustering, E2E encr
 | **Memory management** | Global budget (default 256 MB), TTL eviction, LRU eviction when over budget |
 | **Zero-copy storage** | Recovery entries share `Bytes` (Arc) with the broadcast path |
 | **Recovery on reconnect** | `subscribe_with_recovery()` replays missed messages automatically |
+| **Per-message stamp** | When recovery is enabled, every topic broadcast carries `tp`/`e`/`o` (topic, epoch, offset) so clients dedup idempotently and detect gaps from the messages themselves |
 
 ### Client SDKs (Python + TypeScript/React)
 
@@ -91,8 +92,8 @@ High-performance WebSocket server built in Rust with native clustering, E2E encr
 | **Circuit breaker** | CLOSED/OPEN/HALF_OPEN state machine, prevents connection storms |
 | **Rate limiting** | Client-side token bucket, coordinates with server feedback |
 | **E2E encryption** | Wire-compatible AES-GCM-256 + ECDH P-256 (both clients speak the same protocol) |
-| **Event sequencing** | Duplicate detection (sliding window) + out-of-order buffering |
-| **Network monitor** | Real-time latency, jitter, packet loss measurement, quality scoring |
+| **Event sequencing** | Duplicate detection (sliding window) + per-topic `(epoch, offset)` idempotent dedup with automatic gap recovery |
+| **Network monitor** | Real-time latency, jitter, and connection-quality scoring (Python client also estimates packet loss) |
 | **Priority queues** | 5 levels from CRITICAL to BACKGROUND |
 | **Offline queue** | IndexedDB persistence (TypeScript), replayed on reconnect |
 | **Compression** | Automatic zlib for messages above threshold |
@@ -105,8 +106,11 @@ High-performance WebSocket server built in Rust with native clustering, E2E encr
 |---------|---------|
 | **Origin validation** | Configure in reverse proxy (nginx/Caddy) to prevent CSWSH |
 | **Cookie auth** | `access_token` HTTP-only cookie with `Secure + SameSite=Lax` (OWASP recommended for browsers) |
-| **Frame protection** | 1 MB max frame size, serde_json parsing (no eval), escaped user IDs in server_ready |
+| **Frame protection** | 1 MB max frame size, serde_json parsing (no eval), escaped user IDs in server_ready; inbound msgpack rejected beyond 64 nesting levels |
 | **Cluster frame protection** | zstd decompression output capped at 1 MB (MAX_FRAME_SIZE), protocol version validation |
+| **Slowloris protection** | At most 512 concurrent pre-handshake connections; sockets that never complete the WS upgrade are bounded and dropped |
+| **Bounded callback dispatch** | Callback mode caps in-flight `on_message` callbacks at 256 per connection; excess inbound work is shed and counted as rate-limited |
+| **Fail-closed recovery ACL** | Recovery replay applies the connection's topic ACL — unauthorized topics are never replayed or position-probed |
 
 ---
 
@@ -318,10 +322,10 @@ result = server.subscribe_with_recovery(
     epoch=client_epoch,       # From previous session
     offset=client_offset,     # From previous session
 )
-# {"topics": {"prices": {"epoch": 123, "offset": 456, "recovered": True, "count": 12}}}
+# {"topics": {"prices": {"epoch": "0000007b", "offset": 456, "recovered": True, "count": 12}}}
 ```
 
-The server maintains per-topic ring buffers (power-of-2 capacity, bitmask indexing). Clients store the `epoch` and `offset` from their last received message. On reconnect, the server replays missed messages from the ring buffer. If the gap is too large or the epoch has changed, the client receives a `NotRecovered` status and should re-subscribe from scratch.
+The server maintains per-topic ring buffers (power-of-2 capacity, bitmask indexing). When recovery is enabled, every topic broadcast is stamped with `tp`/`e`/`o` (topic, epoch, offset) fields, so clients track their per-topic position from the messages themselves, drop duplicates idempotently by `(epoch, offset)`, and automatically request recovery when they detect an offset gap. On reconnect, the server replays missed messages from the ring buffer. If the gap is too large or the epoch has changed, the client receives a `NotRecovered` status and should re-subscribe from scratch.
 
 Memory is managed with a global budget (default 256 MB), TTL eviction for idle buffers, and LRU eviction when over budget.
 
@@ -502,7 +506,7 @@ def handle(event):
 client.run_forever()
 ```
 
-Key features: 4 reconnect strategies (exponential, linear, fibonacci, adaptive), connection pool with health scoring and 3 load balancing strategies, circuit breaker, token bucket rate limiter, event sequencer with dedup and reorder buffering, network quality monitoring (latency/jitter/packet loss).
+Key features: 4 reconnect strategies (exponential, linear, fibonacci, adaptive), connection pool with health scoring and 3 load balancing strategies, circuit breaker, token bucket rate limiter, event sequencer with id dedup plus per-topic `(epoch, offset)` idempotent dedup and gap recovery, network quality monitoring (latency/jitter/packet loss).
 
 See [python-client/](python-client/) for full source and examples.
 
@@ -530,7 +534,7 @@ function App() {
 
 Key features: offline queue with IndexedDB persistence, adaptive quality management, connection pool with health scoring, E2E encryption (Web Crypto API), message batching, 5 priority levels, Zustand store for external state access.
 
-See [client/](client/) for full source and examples.
+See [ts-client/](ts-client/) for full source and examples.
 
 ---
 
@@ -573,7 +577,7 @@ Working examples in the [`examples/`](examples/) directory:
 - [Rust Utilities](docs/RUST_UTILITIES.md) - priority queues, rate limiters, sequencing, compression, crypto, JWT
 - [Security](docs/SECURITY.md) - JWT, encryption, mTLS, rate limiting, circuit breaker
 - [Deployment](docs/DEPLOYMENT.md) - production setup, Docker, Kubernetes, cluster configuration
-- [Migration Guide](docs/MIGRATION.md) - upgrading from v1.x to v2.0
+- [Migration Guide](docs/MIGRATION.md) - upgrading from v1.x to v2.x
 - [Contributing](CONTRIBUTING.md) - development setup and coding standards
 - [Changelog](CHANGELOG.md) - version history
 

{wse_server-2.3.2 → wse_server-2.4.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "wse-server"
-version = "2.3.2"
+version = "2.4.1"
 description = "Rust-powered WebSocket engine for Python. Up to 5M fan-out del/s. Zero-GIL JWT."
 readme = "README.md"
 license = { text = "MIT" }

{wse_server-2.3.2 → wse_server-2.4.1}/rust/Cargo.lock

@@ -1491,9 +1491,9 @@ dependencies = [
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.10"
+version = "0.103.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df33b2b81ac578cabaf06b89b0631153a3f416b0a886e8a7a1707fb51abbd1ef"
+checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
 dependencies = [
  "aws-lc-rs",
  "ring",
@@ -2327,7 +2327,7 @@ dependencies = [
 
 [[package]]
 name = "wse-accel"
-version = "2.3.2"
+version = "2.4.0"
 dependencies = [
  "aes-gcm",
  "ahash",

{wse_server-2.3.2 → wse_server-2.4.1}/rust/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "wse-accel"
-version = "2.3.2"
+version = "2.4.0"
 edition = "2024"
 
 [lib]