perf(cmpp): process inbound submits within client window

docs/contracts/inbound-r6-declarations.json

@@ -78,19 +78,19 @@
       "name": "authRequest",
       "kind": "type",
       "file": "authentication.go",
-        "sha256": "742c3df9a2743741b679a5e1524a8826168385e2af5442fc9019ffc8139ea159"
+      "sha256": "742c3df9a2743741b679a5e1524a8826168385e2af5442fc9019ffc8139ea159"
     },
     {
       "name": "authResponse",
       "kind": "type",
       "file": "authentication.go",
-      "sha256": "387ff32b3067a0eb342d09e1e5d3308f8359415171a2045f10dc56ca01205727"
+      "sha256": "049a0b49b97fca25e6093948732f33c9896020c8f3ef8ca4303b05796047ff2b"
     },
     {
       "name": "authenticate",
       "kind": "func",
       "file": "authentication.go",
-        "sha256": "fbd2a9aab7116a66f4a9cdc4538d1ccd71f822dda37f3f92c08d62417c1f4418"
+      "sha256": "fbd2a9aab7116a66f4a9cdc4538d1ccd71f822dda37f3f92c08d62417c1f4418"
     },
     {
       "name": "cmppVersionName",
@@ -102,7 +102,13 @@
       "name": "handleLogin",
       "kind": "func",
       "file": "authentication.go",
-        "sha256": "b40ab9a3d1230f71af983a0b1a7c510f56f9e1e1d09817f8705b55c6412ee11f"
+      "sha256": "4d38524f2e4efc3bd19d7e319268b611c306341e18cb8b92f693922c1a21eee0"
+    },
+    {
+      "name": "reportSecurityEvent",
+      "kind": "func",
+      "file": "authentication.go",
+      "sha256": "8d20e1b5b80f1a8a7c8948bc5dcab283f4c14d9d516008afdfc061b3f74cbaeb"
     },
     {
       "name": "setInboundConnectResponse",
@@ -182,6 +188,12 @@
       "file": "delivery.go",
       "sha256": "4acf5485100e1bc6bb19a8004a3b1b7796fd8a6192fe2899e163abed7d134b69"
     },
+    {
+      "name": "downstreamReceiptMessageID",
+      "kind": "func",
+      "file": "delivery.go",
+      "sha256": "8b9d214452acdaebfb193c79bd810219fc2400a4c10784f1c3e3322e70a7ad9c"
+    },
     {
       "name": "errorMessageWithCode",
       "kind": "func",
@@ -342,13 +354,19 @@
       "name": "ListenAndServe",
       "kind": "func",
       "file": "server.go",
-      "sha256": "c57e5d860f6bdbb7d47a5414e0d186fe34cf61c42f94fc2b1ab5739b6272c272"
+      "sha256": "8415f1a682d28c5a64f3fbe26972b1cab07cd04c43c74d7e9da1065255a06e5d"
     },
     {
       "name": "Server",
       "kind": "type",
       "file": "server.go",
-        "sha256": "b43c6128e784432a544631754f449c49fa1ad3e2cd456ccf795cb5fef69fceaf"
+      "sha256": "aa919bb151d551a47e1c3fc1191fdd90ee9757f58ef10a718000ff4e8961e4d3"
+    },
+    {
+      "name": "boundedSubmitWindow",
+      "kind": "func",
+      "file": "server.go",
+      "sha256": "b5ef665e15e9c4b6bad345c94cdc19c28cce4037fb9f484a9d8ca7319c8418c3"
     },
     {
       "name": "defaultHTTPTimeout",
@@ -356,12 +374,30 @@
       "file": "server.go",
       "sha256": "247aaf1070a6886f01059677dad739e69cb9dd10bd55d6397ba5fb9d385fe39a"
     },
+    {
+      "name": "ActiveConnectionCount",
+      "kind": "func",
+      "file": "sessions.go",
+      "sha256": "3df8a36ca047e9b0d2fb6e2cc4f54b5623b54edacb28397c7e49d2452ee40450"
+    },
     {
       "name": "DisconnectAccount",
       "kind": "func",
       "file": "sessions.go",
       "sha256": "306c822ca618b5d47dd002595e0896b87d86c26a0b35ef7ea6b032df8cefe66b"
     },
+    {
+      "name": "SubmitSlotSnapshot",
+      "kind": "func",
+      "file": "sessions.go",
+      "sha256": "4d80321cc1634c4c15880f335144c4c4927cb94df0b4390da1499aa649feb317"
+    },
+    {
+      "name": "beginInboundSubmit",
+      "kind": "func",
+      "file": "sessions.go",
+      "sha256": "9a25ff062c976af7bddd07b2ace5b0e0de3a562a5e26f8df03fb0030a7ac470b"
+    },
     {
       "name": "downstreamConnectionEvent",
       "kind": "type",
@@ -378,7 +414,7 @@
       "name": "downstreamSession",
       "kind": "type",
       "file": "sessions.go",
-      "sha256": "36d85eab72c673e4e4d47a2b60e68d96561ecb93b0a851de850280706e6779bc"
+      "sha256": "3f4383f1c5406906df5065f32dc38f3a1be84f6fd678a2533101ab35d90f5d68"
     },
     {
       "name": "findSessionByConn",
@@ -452,6 +488,12 @@
       "file": "sessions.go",
       "sha256": "61cf0ec3ac4278be5ccbd112d196aec662ae20f6aebd6079ac7102e83b1e7008"
     },
+    {
+      "name": "submitWindowByConn",
+      "kind": "func",
+      "file": "sessions.go",
+      "sha256": "d17509dc36a19c5d1910bb8588ef875fd4f6225675643f994886d0f48aa15f08"
+    },
     {
       "name": "touchPresence",
       "kind": "func",
@@ -474,7 +516,7 @@
       "name": "handleSubmit",
       "kind": "func",
       "file": "submit.go",
-        "sha256": "76550096e4047d8bcfbb14f693294e86c7a1bf0be2db953f8afebaecd661c577"
+      "sha256": "9d6590964ba080a55758ee7fee0b3acefc398ce81d3d13fd7eac4660b2d90e68"
     },
     {
       "name": "inboundLongMessageFragment",
@@ -500,6 +542,12 @@
       "file": "submit.go",
       "sha256": "977d81193fdc2adfd402d6b1ddb142ea2fdf44f7c8f8d2d00ca8cf20d2cf0830"
     },
+    {
+      "name": "observeInboundSubmitResponse",
+      "kind": "func",
+      "file": "submit.go",
+      "sha256": "645537f6f6e6eb69296f756fb3cb291ccecf2b82d48ce0bea427bb898dff6188"
+    },
     {
       "name": "setInboundSubmitResponse",
       "kind": "func",
@@ -548,11 +596,17 @@
       "file": "transport.go",
       "sha256": "fd069087ad8497197f55a98ecfb9e5b1234ce641a0fb0a9161f8c320f436dd37"
     },
+    {
+      "name": "maxAPIResponseBodyBytes",
+      "kind": "const",
+      "file": "transport.go",
+      "sha256": "3b238a26101aa6a3b50d6651479502adc2be2fb98b338c933cbfd4c90510995f"
+    },
     {
       "name": "post",
       "kind": "func",
       "file": "transport.go",
-        "sha256": "7982e33b65432936ef97e85357e662a1547c4a93a9852f145127b74ab50609c3"
+      "sha256": "7982e33b65432936ef97e85357e662a1547c4a93a9852f145127b74ab50609c3"
     },
     {
       "name": "remoteIP",