@bopen-io/wallet-toolbox 2.1.21-parity-fix.2 → 2.6.2-brc153.2

package/out/src/storage/remoting/edgePolicy.js

@@ -0,0 +1,570 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readResourceLimit = readResourceLimit;
+exports.readResourceProfile = readResourceProfile;
+exports.profileValue = profileValue;
+exports.readAllowedOrigins = readAllowedOrigins;
+exports.readCorsOriginSetting = readCorsOriginSetting;
+exports.corsPolicy = corsPolicy;
+exports.securityHeaders = securityHeaders;
+exports.readBodyLimitBytes = readBodyLimitBytes;
+exports.initialDoubleSlashCompatibility = initialDoubleSlashCompatibility;
+exports.responseSizeLimit = responseSizeLimit;
+exports.bodyParserErrorHandler = bodyParserErrorHandler;
+exports.concurrencyLimit = concurrencyLimit;
+exports.configureHttpServer = configureHttpServer;
+const MAX_BODY_BYTES = 512 * 1024 * 1024;
+const MAX_CONCURRENT_REQUESTS = 100_000;
+const MAX_REQUEST_TIMEOUT_MS = 60 * 60 * 1000;
+const DEFAULT_ALLOWED_HEADERS = [
+    'Accept',
+    'Authorization',
+    'Content-Type',
+    'If-None-Match',
+    'X-BSV-Action-Batch-Encoding',
+    'X-BSV-Auth-Identity-Key',
+    'X-BSV-Auth-Message-Type',
+    'X-BSV-Auth-Nonce',
+    'X-BSV-Auth-Request-ID',
+    'X-BSV-Auth-Requested-Certificates',
+    'X-BSV-Auth-Signature',
+    'X-BSV-Auth-Version',
+    'X-BSV-Auth-Your-Nonce',
+    'X-BSV-Binary-Encoding',
+    'X-BSV-Binary-Request-Encoding',
+    'X-BSV-Payment',
+    'X-BSV-Topic',
+    'X-Aggregation',
+    'X-Callback-Token',
+    'X-Includes-Off-Chain-Values',
+    'X-Topics'
+];
+const DEFAULT_EXPOSED_HEADERS = [
+    'ETag',
+    'RateLimit',
+    'RateLimit-Policy',
+    'Retry-After',
+    'X-BSV-Auth-Identity-Key',
+    'X-BSV-Auth-Message-Type',
+    'X-BSV-Auth-Nonce',
+    'X-BSV-Auth-Request-ID',
+    'X-BSV-Auth-Requested-Certificates',
+    'X-BSV-Auth-Signature',
+    'X-BSV-Auth-Version',
+    'X-BSV-Auth-Your-Nonce',
+    'X-BSV-Binary-Encoding',
+    'X-BSV-Payment-Derivation-Prefix',
+    'X-BSV-Payment-Satoshis-Paid',
+    'X-BSV-Payment-Satoshis-Required',
+    'X-BSV-Payment-Version'
+];
+const HTTP_HEADER_NAME = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+function readPositiveInteger(name, fallback, maximum) {
+    const value = process.env[name];
+    if (value == null || value.trim() === '')
+        return fallback;
+    if (!/^[1-9]\d*$/.test(value)) {
+        throw new Error(`${name} must be a positive integer`);
+    }
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed) || parsed > maximum) {
+        throw new Error(`${name} must not exceed ${maximum}`);
+    }
+    return parsed;
+}
+/**
+ * Reads an operator resource limit. `-1` and `unlimited` are explicit opt-outs;
+ * omitting the setting always retains the service's tested safe default.
+ */
+function readResourceLimit(environmentPrefix, suffix, fallback, maximum = Number.MAX_SAFE_INTEGER) {
+    const name = `${environmentPrefix}_${suffix}`;
+    const value = process.env[name];
+    if (value == null || value.trim() === '')
+        return fallback;
+    const normalized = value.trim().toLowerCase();
+    if (normalized === '-1' || normalized === 'unlimited')
+        return -1;
+    if (!/^[1-9]\d*$/.test(normalized)) {
+        throw new Error(`${name} must be -1, unlimited, or a positive integer`);
+    }
+    const parsed = Number(normalized);
+    if (!Number.isSafeInteger(parsed) || parsed > maximum) {
+        throw new Error(`${name} must not exceed ${maximum}`);
+    }
+    return parsed;
+}
+function readResourceProfile(environmentPrefix, fallback = 'standard') {
+    const prefixed = process.env[`${environmentPrefix}_RESOURCE_PROFILE`];
+    const value = (prefixed == null || prefixed.trim() === '' ? process.env.RESOURCE_PROFILE : prefixed)
+        ?.trim()
+        .toLowerCase() ?? fallback;
+    if (!['small', 'standard', 'high-throughput'].includes(value)) {
+        throw new Error(`${environmentPrefix}_RESOURCE_PROFILE must be small, standard, or high-throughput`);
+    }
+    return value;
+}
+function profileValue(profile, values) {
+    if (profile === 'small')
+        return values.small;
+    if (profile === 'high-throughput')
+        return values.highThroughput;
+    return values.standard;
+}
+function readCsv(name, fallback = []) {
+    const value = process.env[name];
+    if (value == null || value.trim() === '')
+        return fallback;
+    const values = value
+        .split(',')
+        .map(item => item.trim())
+        .filter(Boolean);
+    if (values.includes('*')) {
+        throw new Error(`${name} must contain explicit values; wildcard "*" is not allowed`);
+    }
+    return [...new Set(values)];
+}
+function mergeHeaderNames(...groups) {
+    const names = new Map();
+    for (const name of groups.flat()) {
+        const normalized = name.toLowerCase();
+        if (!names.has(normalized))
+            names.set(normalized, name);
+    }
+    return [...names.values()];
+}
+function responseAllowedHeaders(req, configuredHeaders, reflectRequestedHeaders) {
+    if (!reflectRequestedHeaders)
+        return configuredHeaders;
+    const requested = req.get('access-control-request-headers');
+    if (requested == null || requested.trim() === '')
+        return configuredHeaders;
+    const requestedHeaders = requested
+        .split(',')
+        .map(name => name.trim())
+        .filter(name => HTTP_HEADER_NAME.test(name));
+    return mergeHeaderNames(configuredHeaders, requestedHeaders);
+}
+function normalizeOrigin(origin, name) {
+    if (origin === 'null')
+        throw new Error(`${name} must not contain the opaque "null" origin`);
+    let parsed;
+    try {
+        parsed = new URL(origin);
+    }
+    catch {
+        throw new Error(`${name} contains an invalid origin: ${origin}`);
+    }
+    if (!['http:', 'https:'].includes(parsed.protocol) ||
+        parsed.username !== '' ||
+        parsed.password !== '' ||
+        parsed.pathname !== '/' ||
+        parsed.search !== '' ||
+        parsed.hash !== '') {
+        throw new Error(`${name} must contain HTTP(S) origins without paths, credentials, queries, or fragments`);
+    }
+    return parsed.origin;
+}
+function readAllowedOrigins(environmentPrefix) {
+    const originVariable = `${environmentPrefix}_CORS_ALLOWED_ORIGINS`;
+    const prefixedValue = process.env[originVariable];
+    const sourceVariable = prefixedValue != null && prefixedValue.trim() !== '' ? originVariable : 'CORS_ALLOWED_ORIGINS';
+    return readCsv(sourceVariable).map(origin => normalizeOrigin(origin, sourceVariable));
+}
+function resolveCorsPolicy(environmentPrefix, configuredOrigins, defaultMode) {
+    const originVariable = `${environmentPrefix}_CORS_ALLOWED_ORIGINS`;
+    if (configuredOrigins !== undefined) {
+        const origins = configuredOrigins.map(origin => normalizeOrigin(origin, originVariable));
+        return {
+            mode: origins.length > 0 ? 'allowlist' : 'disabled',
+            origins
+        };
+    }
+    const origins = readAllowedOrigins(environmentPrefix);
+    const prefixedMode = process.env[`${environmentPrefix}_CORS_MODE`]?.trim();
+    const rawMode = (prefixedMode !== undefined && prefixedMode !== '' ? prefixedMode : (process.env.CORS_MODE ?? ''))
+        .trim()
+        .toLowerCase();
+    let mode = rawMode;
+    if (mode === '') {
+        mode = origins.length > 0 ? 'allowlist' : defaultMode;
+    }
+    if (!['public', 'allowlist', 'disabled'].includes(mode)) {
+        throw new Error(`${environmentPrefix}_CORS_MODE must be public, allowlist, or disabled`);
+    }
+    if (mode === 'allowlist' && origins.length === 0) {
+        throw new Error(`${originVariable} must list at least one exact origin in allowlist mode`);
+    }
+    if ((mode === 'public' || mode === 'disabled') && origins.length > 0) {
+        throw new Error(`${originVariable} must be empty when CORS mode is ${mode}`);
+    }
+    return { mode: mode, origins };
+}
+/**
+ * Socket.IO and similar transports can consume the same public/allowlist/
+ * disabled policy as the HTTP middleware.
+ */
+function readCorsOriginSetting(environmentPrefix, defaultMode = 'public') {
+    const policy = resolveCorsPolicy(environmentPrefix, undefined, defaultMode);
+    if (policy.mode === 'public')
+        return '*';
+    if (policy.mode === 'disabled')
+        return [];
+    return policy.origins;
+}
+function appendVary(res, value) {
+    const current = res.getHeader('Vary');
+    const values = new Set((Array.isArray(current) ? current.join(',') : String(current ?? ''))
+        .split(',')
+        .map(item => item.trim())
+        .filter(Boolean));
+    values.add(value);
+    res.setHeader('Vary', [...values].join(', '));
+}
+/**
+ * Public protocol services accept browser origins by default and return
+ * Access-Control-Allow-Origin: * without cookie credentials. Operators can
+ * opt into an exact allowlist or disable cross-origin browser calls with
+ * <PREFIX>_CORS_MODE.
+ */
+function corsPolicy(options) {
+    const policy = resolveCorsPolicy(options.environmentPrefix, options.allowedOrigins, options.defaultMode ?? 'public');
+    if (policy.mode === 'public' && options.allowCredentials === true) {
+        throw new Error('Public CORS mode cannot be combined with cookie credentials');
+    }
+    const allowedHeadersVariable = `${options.environmentPrefix}_CORS_ALLOWED_HEADERS`;
+    const allowedHeaders = readCsv(allowedHeadersVariable, options.allowedHeaders ?? DEFAULT_ALLOWED_HEADERS);
+    // Public protocol clients evolve independently from service deployments.
+    // When an operator or embedding application has not supplied a strict
+    // header allowlist, preserve that compatibility by adding every well-formed
+    // requested preflight header to the known protocol defaults. CORS is not an
+    // authentication boundary; endpoints still validate and authorize headers.
+    const reflectRequestedHeaders = (process.env[allowedHeadersVariable] == null ||
+        process.env[allowedHeadersVariable]?.trim() === '') &&
+        options.allowedHeaders === undefined;
+    const exposedHeaders = readCsv(`${options.environmentPrefix}_CORS_EXPOSED_HEADERS`, options.exposedHeaders ?? DEFAULT_EXPOSED_HEADERS);
+    const methods = [...new Set(options.methods.map(method => method.toUpperCase()))];
+    const maxAgeSeconds = options.maxAgeSeconds ?? 600;
+    return (req, res, next) => {
+        const origin = req.get('origin');
+        if (origin == null || origin === '') {
+            next();
+            return;
+        }
+        // Public mode never reflects the caller-controlled origin and therefore
+        // does not need to parse it. This deliberately preserves browser access
+        // from opaque origins such as sandboxed documents, file-based apps, and
+        // mobile webviews, which send `Origin: null` and are covered by `*`.
+        if (policy.mode === 'public') {
+            const responseHeaders = responseAllowedHeaders(req, allowedHeaders, reflectRequestedHeaders);
+            res.setHeader('Access-Control-Allow-Origin', '*');
+            res.setHeader('Access-Control-Allow-Methods', methods.join(', '));
+            res.setHeader('Access-Control-Allow-Headers', responseHeaders.join(', '));
+            res.setHeader('Access-Control-Expose-Headers', exposedHeaders.join(', '));
+            res.setHeader('Access-Control-Max-Age', String(maxAgeSeconds));
+            if (req.method === 'OPTIONS') {
+                res.sendStatus(204);
+                return;
+            }
+            next();
+            return;
+        }
+        let normalizedOrigin;
+        try {
+            normalizedOrigin = normalizeOrigin(origin, 'Origin');
+        }
+        catch {
+            res.status(403).json({
+                status: 'error',
+                code: 'ERR_ORIGIN_NOT_ALLOWED',
+                description: 'The request origin is not allowed.'
+            });
+            return;
+        }
+        // Select the response value from trusted configuration, never from the
+        // request header. The normalized request origin is only a lookup key.
+        const configuredOrigin = policy.origins.find(allowedOrigin => allowedOrigin === normalizedOrigin);
+        if (policy.mode === 'disabled' || configuredOrigin == null) {
+            res.status(403).json({
+                status: 'error',
+                code: 'ERR_ORIGIN_NOT_ALLOWED',
+                description: 'The request origin is not allowed.'
+            });
+            return;
+        }
+        appendVary(res, 'Origin');
+        const responseHeaders = responseAllowedHeaders(req, allowedHeaders, reflectRequestedHeaders);
+        res.setHeader('Access-Control-Allow-Origin', configuredOrigin);
+        res.setHeader('Access-Control-Allow-Methods', methods.join(', '));
+        res.setHeader('Access-Control-Allow-Headers', responseHeaders.join(', '));
+        res.setHeader('Access-Control-Expose-Headers', exposedHeaders.join(', '));
+        res.setHeader('Access-Control-Max-Age', String(maxAgeSeconds));
+        if (options.allowCredentials === true) {
+            res.setHeader('Access-Control-Allow-Credentials', 'true');
+        }
+        if (req.method === 'OPTIONS') {
+            res.sendStatus(204);
+            return;
+        }
+        next();
+    };
+}
+function readHeaderSetting(environmentPrefix, suffix) {
+    if (environmentPrefix == null || environmentPrefix === '')
+        return undefined;
+    const name = `${environmentPrefix}_${suffix}`;
+    const value = process.env[name];
+    if (value == null || value.trim() === '')
+        return undefined;
+    if (/[\r\n]/.test(value))
+        throw new Error(`${name} must be a single-line header value`);
+    return value.trim();
+}
+function readOptionalHeader(environmentPrefix, suffix, allowedValues) {
+    const value = readHeaderSetting(environmentPrefix, suffix);
+    if (value == null)
+        return undefined;
+    if (value.toLowerCase() === 'disabled')
+        return false;
+    if (allowedValues != null && !allowedValues.includes(value)) {
+        throw new Error(`${environmentPrefix ?? 'SERVICE'}_${suffix} must be ${allowedValues.join(', ')}, or disabled`);
+    }
+    return value;
+}
+function readOptionalBoolean(environmentPrefix, suffix) {
+    const value = readHeaderSetting(environmentPrefix, suffix);
+    if (value == null)
+        return undefined;
+    if (value === 'true')
+        return true;
+    if (value === 'false')
+        return false;
+    throw new Error(`${environmentPrefix ?? 'SERVICE'}_${suffix} must be true or false`);
+}
+function securityHeaders(options = {}) {
+    const contentSecurityPolicy = readOptionalHeader(options.environmentPrefix, 'CONTENT_SECURITY_POLICY') ??
+        options.contentSecurityPolicy ??
+        "default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'";
+    const crossOriginResourcePolicy = readOptionalHeader(options.environmentPrefix, 'CROSS_ORIGIN_RESOURCE_POLICY', [
+        'same-origin',
+        'same-site',
+        'cross-origin'
+    ]) ??
+        options.crossOriginResourcePolicy ??
+        'cross-origin';
+    const crossOriginOpenerPolicy = readOptionalHeader(options.environmentPrefix, 'CROSS_ORIGIN_OPENER_POLICY', [
+        'same-origin',
+        'same-origin-allow-popups',
+        'unsafe-none'
+    ]) ??
+        options.crossOriginOpenerPolicy ??
+        'same-origin';
+    const frameOptions = readOptionalHeader(options.environmentPrefix, 'FRAME_OPTIONS', ['DENY', 'SAMEORIGIN']) ??
+        options.frameOptions ??
+        'DENY';
+    const permissionsPolicy = readOptionalHeader(options.environmentPrefix, 'PERMISSIONS_POLICY') ??
+        options.permissionsPolicy ??
+        'camera=(), geolocation=(), microphone=(), payment=(), usb=()';
+    const strictTransportSecurity = readOptionalBoolean(options.environmentPrefix, 'STRICT_TRANSPORT_SECURITY') ??
+        options.strictTransportSecurity ??
+        true;
+    return (req, res, next) => {
+        res.setHeader('X-Content-Type-Options', 'nosniff');
+        if (frameOptions !== false) {
+            res.setHeader('X-Frame-Options', frameOptions);
+        }
+        res.setHeader('Referrer-Policy', 'no-referrer');
+        if (permissionsPolicy !== false) {
+            res.setHeader('Permissions-Policy', permissionsPolicy);
+        }
+        res.setHeader('X-Permitted-Cross-Domain-Policies', 'none');
+        if (crossOriginOpenerPolicy !== false) {
+            res.setHeader('Cross-Origin-Opener-Policy', crossOriginOpenerPolicy);
+        }
+        if (crossOriginResourcePolicy !== false) {
+            res.setHeader('Cross-Origin-Resource-Policy', crossOriginResourcePolicy);
+        }
+        if (contentSecurityPolicy !== false) {
+            res.setHeader('Content-Security-Policy', contentSecurityPolicy);
+        }
+        if (strictTransportSecurity && req.secure) {
+            res.setHeader('Strict-Transport-Security', 'max-age=31536000; includeSubDomains');
+        }
+        next();
+    };
+}
+function readBodyLimitBytes(environmentPrefix, fallback, maximum = MAX_BODY_BYTES) {
+    const limit = readResourceLimit(environmentPrefix, 'MAX_BODY_BYTES', fallback, maximum);
+    // raw-body/body-parser interpret negative numbers as a zero-ish ceiling.
+    // A deliberately unlimited operator setting therefore maps to the largest
+    // exactly representable byte count accepted by those APIs.
+    return limit === -1 ? Number.MAX_SAFE_INTEGER : limit;
+}
+/**
+ * Preserve compatibility with clients that accidentally emit two or more
+ * initial slashes. Only the initial slash run is normalized; the remainder of
+ * the path and query string is unchanged.
+ */
+function initialDoubleSlashCompatibility(req, _res, next) {
+    if (req.url.startsWith('//'))
+        req.url = req.url.replace(/^\/{2,}/, '/');
+    next();
+}
+function responseChunkByteLength(chunk, encoding) {
+    if (typeof chunk === 'string') {
+        const bufferEncoding = typeof encoding === 'string' ? encoding : 'utf8';
+        return Buffer.byteLength(chunk, bufferEncoding);
+    }
+    if (Buffer.isBuffer(chunk) || chunk instanceof Uint8Array)
+        return chunk.byteLength;
+    return Buffer.byteLength(JSON.stringify(chunk) ?? '', 'utf8');
+}
+/**
+ * Bounds materialized JSON/text/binary Express responses before downstream
+ * authentication middleware signs or serializes them again. Streaming
+ * endpoints must enforce their own byte budget while producing chunks.
+ */
+function responseSizeLimit(environmentPrefix, fallback, maximum = MAX_BODY_BYTES) {
+    const limit = readResourceLimit(environmentPrefix, 'MAX_RESPONSE_BYTES', fallback, maximum);
+    if (limit === -1)
+        return (_req, _res, next) => next();
+    return (_req, res, next) => {
+        const originalStatus = res.status.bind(res);
+        const originalJson = res.json.bind(res);
+        const originalSend = res.send.bind(res);
+        const originalEnd = res.end.bind(res);
+        let rejected = false;
+        let rejecting = false;
+        const tooLarge = (byteLength) => byteLength > limit;
+        const reject = () => {
+            if (rejected)
+                return res;
+            rejected = true;
+            rejecting = true;
+            originalStatus(413);
+            const response = originalJson({
+                status: 'error',
+                code: 'ERR_RESPONSE_TOO_LARGE',
+                description: 'The requested response exceeds the configured service limit.'
+            });
+            rejecting = false;
+            return response;
+        };
+        res.json = ((value) => {
+            if (rejecting)
+                return originalJson(value);
+            if (rejected)
+                return res;
+            const serialized = JSON.stringify(value) ?? '';
+            if (tooLarge(Buffer.byteLength(serialized, 'utf8')))
+                return reject();
+            return originalJson(value);
+        });
+        res.send = ((value) => {
+            if (rejecting)
+                return originalSend(value);
+            if (rejected)
+                return res;
+            let byteLength;
+            if (typeof value === 'string')
+                byteLength = Buffer.byteLength(value, 'utf8');
+            else if (Buffer.isBuffer(value) || value instanceof Uint8Array)
+                byteLength = value.byteLength;
+            else
+                byteLength = Buffer.byteLength(JSON.stringify(value) ?? '', 'utf8');
+            if (tooLarge(byteLength))
+                return reject();
+            return originalSend(value);
+        });
+        res.end = ((chunk, encoding, callback) => {
+            if (rejecting) {
+                return originalEnd(chunk, encoding, callback);
+            }
+            if (rejected)
+                return res;
+            if (chunk != null) {
+                const byteLength = responseChunkByteLength(chunk, encoding);
+                if (tooLarge(byteLength))
+                    return reject();
+            }
+            return originalEnd(chunk, encoding, callback);
+        });
+        next();
+    };
+}
+/**
+ * Convert body-parser/Express parser failures into stable, non-sensitive
+ * protocol errors. Install immediately after all body parsers.
+ */
+function bodyParserErrorHandler(error, _req, res, next) {
+    const parserError = error;
+    if (parserError?.type === 'entity.too.large' ||
+        parserError?.status === 413 ||
+        parserError?.statusCode === 413) {
+        res.status(413).json({
+            status: 'error',
+            code: 'ERR_BODY_TOO_LARGE',
+            description: 'The request body exceeds the endpoint limit.'
+        });
+        return;
+    }
+    if (parserError?.type === 'entity.parse.failed' ||
+        parserError?.status === 400 ||
+        parserError?.statusCode === 400) {
+        res.status(400).json({
+            status: 'error',
+            code: 'ERR_INVALID_BODY',
+            description: 'The request body is invalid.'
+        });
+        return;
+    }
+    next(error);
+}
+/**
+ * A local concurrency ceiling prevents a single process from accepting
+ * unbounded in-flight application work. Distributed/global quotas remain the
+ * responsibility of the deployment's shared rate-limit store or gateway.
+ */
+function concurrencyLimit(environmentPrefix, fallback) {
+    const maximum = readResourceLimit(environmentPrefix, 'MAX_CONCURRENT_REQUESTS', fallback, MAX_CONCURRENT_REQUESTS);
+    if (maximum === -1)
+        return (_req, _res, next) => next();
+    let active = 0;
+    return (_req, res, next) => {
+        if (active >= maximum) {
+            res.setHeader('Retry-After', '1');
+            res.status(503).json({
+                status: 'error',
+                code: 'ERR_SERVER_BUSY',
+                description: 'The service is temporarily at capacity.'
+            });
+            return;
+        }
+        active += 1;
+        let released = false;
+        const release = () => {
+            if (released)
+                return;
+            released = true;
+            active -= 1;
+        };
+        res.once('finish', release);
+        res.once('close', release);
+        next();
+    };
+}
+function configureHttpServer(server, environmentPrefix, defaults) {
+    const requestTimeoutMs = readPositiveInteger(`${environmentPrefix}_REQUEST_TIMEOUT_MS`, defaults.requestTimeoutMs, MAX_REQUEST_TIMEOUT_MS);
+    const headersTimeoutMs = readPositiveInteger(`${environmentPrefix}_HEADERS_TIMEOUT_MS`, defaults.headersTimeoutMs, requestTimeoutMs);
+    const keepAliveTimeoutMs = readPositiveInteger(`${environmentPrefix}_KEEP_ALIVE_TIMEOUT_MS`, defaults.keepAliveTimeoutMs, requestTimeoutMs);
+    const socketTimeoutMs = readPositiveInteger(`${environmentPrefix}_SOCKET_TIMEOUT_MS`, defaults.socketTimeoutMs, MAX_REQUEST_TIMEOUT_MS);
+    server.requestTimeout = requestTimeoutMs;
+    server.headersTimeout = headersTimeoutMs;
+    server.keepAliveTimeout = keepAliveTimeoutMs;
+    server.maxRequestsPerSocket = readPositiveInteger(`${environmentPrefix}_MAX_REQUESTS_PER_SOCKET`, defaults.maxRequestsPerSocket, 1_000_000);
+    const maxConnections = readResourceLimit(environmentPrefix, 'MAX_CONNECTIONS', defaults.maxConnections ?? 1_000, 1_000_000);
+    server.maxConnections = maxConnections === -1 ? Number.MAX_SAFE_INTEGER : maxConnections;
+    if (typeof server.setTimeout === 'function') {
+        server.setTimeout(socketTimeoutMs);
+    }
+}
+//# sourceMappingURL=edgePolicy.js.map

package/out/src/storage/remoting/edgePolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"edgePolicy.js","sourceRoot":"","sources":["../../../../src/storage/remoting/edgePolicy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAKA,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAA;AACxC,MAAM,uBAAuB,GAAG,OAAO,CAAA;AACvC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAE7C,MAAM,uBAAuB,GAAG;IAC9B,QAAQ;IACR,eAAe;IACf,cAAc;IACd,eAAe;IACf,6BAA6B;IAC7B,yBAAyB;IACzB,yBAAyB;IACzB,kBAAkB;IAClB,uBAAuB;IACvB,mCAAmC;IACnC,sBAAsB;IACtB,oBAAoB;IACpB,uBAAuB;IACvB,uBAAuB;IACvB,+BAA+B;IAC/B,eAAe;IACf,aAAa;IACb,eAAe;IACf,kBAAkB;IAClB,6BAA6B;IAC7B,UAAU;CACX,CAAA;AAED,MAAM,uBAAuB,GAAG;IAC9B,MAAM;IACN,WAAW;IACX,kBAAkB;IAClB,aAAa;IACb,yBAAyB;IACzB,yBAAyB;IACzB,kBAAkB;IAClB,uBAAuB;IACvB,mCAAmC;IACnC,sBAAsB;IACtB,oBAAoB;IACpB,uBAAuB;IACvB,uBAAuB;IACvB,iCAAiC;IACjC,6BAA6B;IAC7B,iCAAiC;IACjC,uBAAuB;CACxB,CAAA;AAED,MAAM,gBAAgB,GAAG,gCAAgC,CAAA;AA2CzD,SAAS,mBAAmB,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAe;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAA;IACzD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAA;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,OAAO,EAAE,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;GAGG;AACH,2BACE,iBAAyB,EACzB,MAAc,EACd,QAAgB,EAChB,OAAO,GAAW,MAAM,CAAC,gBAAgB;IAEzC,MAAM,IAAI,GAAG,GAAG,iBAAiB,IAAI,MAAM,EAAE,CAAA;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAA;IACzD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7C,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,CAAC,CAAC,CAAA;IAChE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,+CAA+C,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,OAAO,EAAE,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,6BACE,iBAAyB,EACzB,QAAQ,GAAwB,UAAU;IAE1C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,iBAAiB,mBAAmB,CAAC,CAAA;IACrE,MAAM,KAAK,GACT,CAAC,QAAQ,IAAI,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpF,EAAE,IAAI,EAAE;SACP,WAAW,EAAE,IAAI,QAAQ,CAAA;IAC9B,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,GAAG,iBAAiB,+DAA+D,CACpF,CAAA;IACH,CAAC;IACD,OAAO,KAA4B,CAAA;AACrC,CAAC;AAED,sBAA6B,OAA4B,EAAE,MAA6B;IACtF,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,KAAK,CAAA;IAC5C,IAAI,OAAO,KAAK,iBAAiB;QAAE,OAAO,MAAM,CAAC,cAAc,CAAA;IAC/D,OAAO,MAAM,CAAC,QAAQ,CAAA;AACxB,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,QAAQ,GAAa,EAAE;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAA;IACzD,MAAM,MAAM,GAAG,KAAK;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,OAAO,CAAC,CAAA;IAClB,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4DAA4D,CAAC,CAAA;IACtF,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAG,MAAkB;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAAY,EACZ,iBAA2B,EAC3B,uBAAgC;IAEhC,IAAI,CAAC,uBAAuB;QAAE,OAAO,iBAAiB,CAAA;IACtD,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAA;IAC3D,IAAI,SAAS,IAAI,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,iBAAiB,CAAA;IAC1E,MAAM,gBAAgB,GAAG,SAAS;SAC/B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9C,OAAO,gBAAgB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,IAAY;IACnD,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAA;IAC3F,IAAI,MAAW,CAAA;IACf,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gCAAgC,MAAM,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,IACE,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC9C,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,GAAG;QACvB,MAAM,CAAC,MAAM,KAAK,EAAE;QACpB,MAAM,CAAC,IAAI,KAAK,EAAE,EAClB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,iFAAiF,CACzF,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAA;AACtB,CAAC;AAED,4BAAmC,iBAAyB;IAC1D,MAAM,cAAc,GAAG,GAAG,iBAAiB,uBAAuB,CAAA;IAClE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IACjD,MAAM,cAAc,GAClB,aAAa,IAAI,IAAI,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAA;IAChG,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,iBAAiB,CACxB,iBAAyB,EACzB,iBAAuC,EACvC,WAAqB;IAErB,MAAM,cAAc,GAAG,GAAG,iBAAiB,uBAAuB,CAAA;IAClE,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;QACxF,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;YACnD,OAAO;SACR,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAA;IACrD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,iBAAiB,YAAY,CAAC,EAAE,IAAI,EAAE,CAAA;IAC1E,MAAM,OAAO,GAAG,CACd,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CACjG;SACE,IAAI,EAAE;SACN,WAAW,EAAE,CAAA;IAChB,IAAI,IAAI,GAAW,OAAO,CAAA;IAC1B,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAChB,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAA;IACvD,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,iBAAiB,mDAAmD,CAAC,CAAA;IAC1F,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,cAAc,wDAAwD,CAAC,CAAA;IAC5F,CAAC;IACD,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,GAAG,cAAc,oCAAoC,IAAI,EAAE,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAgB,EAAE,OAAO,EAAE,CAAA;AAC5C,CAAC;AAED;;;GAGG;AACH,+BACE,iBAAyB,EACzB,WAAW,GAAa,QAAQ;IAEhC,MAAM,MAAM,GAAG,iBAAiB,CAAC,iBAAiB,EAAE,SAAS,EAAE,WAAW,CAAC,CAAA;IAC3E,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAA;IACxC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,CAAA;IACzC,OAAO,MAAM,CAAC,OAAO,CAAA;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,GAAa,EAAE,KAAa;IAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;SACjE,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,OAAO,CAAC,CACnB,CAAA;IACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACjB,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED;;;;;GAKG;AACH,oBAA2B,OAA0B;IACnD,MAAM,MAAM,GAAG,iBAAiB,CAC9B,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,WAAW,IAAI,QAAQ,CAChC,CAAA;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,sBAAsB,GAAG,GAAG,OAAO,CAAC,iBAAiB,uBAAuB,CAAA;IAClF,MAAM,cAAc,GAAG,OAAO,CAC5B,sBAAsB,EACtB,OAAO,CAAC,cAAc,IAAI,uBAAuB,CAClD,CAAA;IACD,yEAAyE;IACzE,sEAAsE;IACtE,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,uBAAuB,GAC3B,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,IAAI;QAC1C,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACrD,OAAO,CAAC,cAAc,KAAK,SAAS,CAAA;IACtC,MAAM,cAAc,GAAG,OAAO,CAC5B,GAAG,OAAO,CAAC,iBAAiB,uBAAuB,EACnD,OAAO,CAAC,cAAc,IAAI,uBAAuB,CAClD,CAAA;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAA;IACjF,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,GAAG,CAAA;IAElD,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAChC,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YACpC,IAAI,EAAE,CAAA;YACN,OAAM;QACR,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,eAAe,GAAG,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAA;YAC5F,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAA;YACjD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YACjE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YACzE,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YACzE,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;YAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;gBACnB,OAAM;YACR,CAAC;YACD,IAAI,EAAE,CAAA;YACN,OAAM;QACR,CAAC;QAED,IAAI,gBAAwB,CAAA;QAC5B,IAAI,CAAC;YACH,gBAAgB,GAAG,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,oCAAoC;aAClD,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAC1C,aAAa,CAAC,EAAE,CAAC,aAAa,KAAK,gBAAgB,CACpD,CAAA;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,oCAAoC;aAClD,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QACzB,MAAM,eAAe,GAAG,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAA;QAC5F,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,CAAA;QAC9D,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACjE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACzE,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACzE,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;QAC9D,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACtC,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAA;QAC3D,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;YACnB,OAAM;QACR,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,iBAAqC,EACrC,MAAc;IAEd,IAAI,iBAAiB,IAAI,IAAI,IAAI,iBAAiB,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IAC3E,MAAM,IAAI,GAAG,GAAG,iBAAiB,IAAI,MAAM,EAAE,CAAA;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IAC1D,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAA;IACvF,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,SAAS,kBAAkB,CACzB,iBAAqC,EACrC,MAAc,EACd,aAAwB;IAExB,MAAM,KAAK,GAAG,iBAAiB,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;IAC1D,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACnC,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,UAAU;QAAE,OAAO,KAAK,CAAA;IACpD,IAAI,aAAa,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,GAAG,iBAAiB,IAAI,SAAS,IAAI,MAAM,YAAY,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAC/F,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,mBAAmB,CAC1B,iBAAqC,EACrC,MAAc;IAEd,MAAM,KAAK,GAAG,iBAAiB,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;IAC1D,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IACnC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IACjC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAA;IACnC,MAAM,IAAI,KAAK,CAAC,GAAG,iBAAiB,IAAI,SAAS,IAAI,MAAM,wBAAwB,CAAC,CAAA;AACtF,CAAC;AAED,yBAAgC,OAAO,GAA2B,EAAE;IAClE,MAAM,qBAAqB,GACzB,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;QACxE,OAAO,CAAC,qBAAqB;QAC7B,iFAAiF,CAAA;IACnF,MAAM,yBAAyB,GAC7B,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,EAAE,8BAA8B,EAAE;QAC5E,aAAa;QACb,WAAW;QACX,cAAc;KACf,CAAC;QACF,OAAO,CAAC,yBAAyB;QACjC,cAAc,CAAA;IAChB,MAAM,uBAAuB,GAC3B,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,EAAE,4BAA4B,EAAE;QAC1E,aAAa;QACb,0BAA0B;QAC1B,aAAa;KACd,CAAC;QACF,OAAO,CAAC,uBAAuB;QAC/B,aAAa,CAAA;IACf,MAAM,YAAY,GAChB,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,EAAE,eAAe,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACtF,OAAO,CAAC,YAAY;QACpB,MAAM,CAAA;IACR,MAAM,iBAAiB,GACrB,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,EAAE,oBAAoB,CAAC;QACnE,OAAO,CAAC,iBAAiB;QACzB,8DAA8D,CAAA;IAChE,MAAM,uBAAuB,GAC3B,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;QAC3E,OAAO,CAAC,uBAAuB;QAC/B,IAAI,CAAA;IAEN,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/D,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;QAClD,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAA;QAChD,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAA;QAC/C,IAAI,iBAAiB,KAAK,KAAK,EAAE,CAAC;YAChC,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAA;QACxD,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAA;QAC1D,IAAI,uBAAuB,KAAK,KAAK,EAAE,CAAC;YACtC,GAAG,CAAC,SAAS,CAAC,4BAA4B,EAAE,uBAAuB,CAAC,CAAA;QACtE,CAAC;QACD,IAAI,yBAAyB,KAAK,KAAK,EAAE,CAAC;YACxC,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,yBAAyB,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,qBAAqB,KAAK,KAAK,EAAE,CAAC;YACpC,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,uBAAuB,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC1C,GAAG,CAAC,SAAS,CAAC,2BAA2B,EAAE,qCAAqC,CAAC,CAAA;QACnF,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,4BACE,iBAAyB,EACzB,QAAgB,EAChB,OAAO,GAAW,cAAc;IAEhC,MAAM,KAAK,GAAG,iBAAiB,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IACvF,yEAAyE;IACzE,0EAA0E;IAC1E,2DAA2D;IAC3D,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,yCACE,GAAY,EACZ,IAAc,EACd,IAAkB;IAElB,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IACvE,IAAI,EAAE,CAAA;AACR,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,QAAiB;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,cAAc,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAE,QAA2B,CAAC,CAAC,CAAC,MAAM,CAAA;QAC3F,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,KAAK,CAAC,UAAU,CAAA;IAClF,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;AAC/D,CAAC;AAED;;;;GAIG;AACH,2BACE,iBAAyB,EACzB,QAAgB,EAChB,OAAO,GAAW,cAAc;IAEhC,MAAM,KAAK,GAAG,iBAAiB,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC3F,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAA;IAErD,OAAO,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAChE,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC3C,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACvC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACvC,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,SAAS,GAAG,KAAK,CAAA;QAErB,MAAM,QAAQ,GAAG,CAAC,UAAkB,EAAW,EAAE,CAAC,UAAU,GAAG,KAAK,CAAA;QACpE,MAAM,MAAM,GAAG,GAAa,EAAE;YAC5B,IAAI,QAAQ;gBAAE,OAAO,GAAG,CAAA;YACxB,QAAQ,GAAG,IAAI,CAAA;YACf,SAAS,GAAG,IAAI,CAAA;YAChB,cAAc,CAAC,GAAG,CAAC,CAAA;YACnB,MAAM,QAAQ,GAAG,YAAY,CAAC;gBAC5B,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,wBAAwB;gBAC9B,WAAW,EAAE,8DAA8D;aAC5E,CAAC,CAAA;YACF,SAAS,GAAG,KAAK,CAAA;YACjB,OAAO,QAAQ,CAAA;QACjB,CAAC,CAAA;QAED,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,KAAc,EAAY,EAAE;YACvC,IAAI,SAAS;gBAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;YACzC,IAAI,QAAQ;gBAAE,OAAO,GAAG,CAAA;YACxB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;YAC9C,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAAE,OAAO,MAAM,EAAE,CAAA;YACpE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAA;QAC5B,CAAC,CAAqB,CAAA;QAEtB,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,KAAc,EAAY,EAAE;YACvC,IAAI,SAAS;gBAAE,OAAO,YAAY,CAAC,KAAc,CAAC,CAAA;YAClD,IAAI,QAAQ;gBAAE,OAAO,GAAG,CAAA;YACxB,IAAI,UAAkB,CAAA;YACtB,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;iBACvE,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,UAAU;gBAAE,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;;gBACxF,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;YACxE,IAAI,QAAQ,CAAC,UAAU,CAAC;gBAAE,OAAO,MAAM,EAAE,CAAA;YACzC,OAAO,YAAY,CAAC,KAAc,CAAC,CAAA;QACrC,CAAC,CAAqB,CAAA;QAEtB,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,KAAe,EAAE,QAAkB,EAAE,QAAkB,EAAY,EAAE;YAC/E,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,WAAW,CAChB,KAAc,EACd,QAAiB,EACjB,QAAiB,CACK,CAAA;YAC1B,CAAC;YACD,IAAI,QAAQ;gBAAE,OAAO,GAAG,CAAA;YACxB,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;gBAC3D,IAAI,QAAQ,CAAC,UAAU,CAAC;oBAAE,OAAO,MAAM,EAAE,CAAA;YAC3C,CAAC;YACD,OAAO,WAAW,CAChB,KAAc,EACd,QAAiB,EACjB,QAAiB,CACK,CAAA;QAC1B,CAAC,CAAoB,CAAA;QAErB,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,gCACE,KAAc,EACd,IAAa,EACb,GAAa,EACb,IAAkB;IAElB,MAAM,WAAW,GAAG,KAInB,CAAA;IACD,IACE,WAAW,EAAE,IAAI,KAAK,kBAAkB;QACxC,WAAW,EAAE,MAAM,KAAK,GAAG;QAC3B,WAAW,EAAE,UAAU,KAAK,GAAG,EAC/B,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,oBAAoB;YAC1B,WAAW,EAAE,8CAA8C;SAC5D,CAAC,CAAA;QACF,OAAM;IACR,CAAC;IACD,IACE,WAAW,EAAE,IAAI,KAAK,qBAAqB;QAC3C,WAAW,EAAE,MAAM,KAAK,GAAG;QAC3B,WAAW,EAAE,UAAU,KAAK,GAAG,EAC/B,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,8BAA8B;SAC5C,CAAC,CAAA;QACF,OAAM;IACR,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,0BAAiC,iBAAyB,EAAE,QAAgB;IAC1E,MAAM,OAAO,GAAG,iBAAiB,CAC/B,iBAAiB,EACjB,yBAAyB,EACzB,QAAQ,EACR,uBAAuB,CACxB,CAAA;IACD,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAA;IACvD,IAAI,MAAM,GAAG,CAAC,CAAA;IAEd,OAAO,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAChE,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;YACtB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;YACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,yCAAyC;aACvD,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,MAAM,IAAI,CAAC,CAAA;QACX,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,MAAM,IAAI,CAAC,CAAA;QACb,CAAC,CAAA;QACD,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC1B,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC;AAED,6BACE,MAAc,EACd,iBAAyB,EACzB,QAAkC;IAElC,MAAM,gBAAgB,GAAG,mBAAmB,CAC1C,GAAG,iBAAiB,qBAAqB,EACzC,QAAQ,CAAC,gBAAgB,EACzB,sBAAsB,CACvB,CAAA;IACD,MAAM,gBAAgB,GAAG,mBAAmB,CAC1C,GAAG,iBAAiB,qBAAqB,EACzC,QAAQ,CAAC,gBAAgB,EACzB,gBAAgB,CACjB,CAAA;IACD,MAAM,kBAAkB,GAAG,mBAAmB,CAC5C,GAAG,iBAAiB,wBAAwB,EAC5C,QAAQ,CAAC,kBAAkB,EAC3B,gBAAgB,CACjB,CAAA;IACD,MAAM,eAAe,GAAG,mBAAmB,CACzC,GAAG,iBAAiB,oBAAoB,EACxC,QAAQ,CAAC,eAAe,EACxB,sBAAsB,CACvB,CAAA;IAED,MAAM,CAAC,cAAc,GAAG,gBAAgB,CAAA;IACxC,MAAM,CAAC,cAAc,GAAG,gBAAgB,CAAA;IACxC,MAAM,CAAC,gBAAgB,GAAG,kBAAkB,CAAA;IAC5C,MAAM,CAAC,oBAAoB,GAAG,mBAAmB,CAC/C,GAAG,iBAAiB,0BAA0B,EAC9C,QAAQ,CAAC,oBAAoB,EAC7B,SAAS,CACV,CAAA;IACD,MAAM,cAAc,GAAG,iBAAiB,CACtC,iBAAiB,EACjB,iBAAiB,EACjB,QAAQ,CAAC,cAAc,IAAI,KAAK,EAChC,SAAS,CACV,CAAA;IACD,MAAM,CAAC,cAAc,GAAG,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAA;IACxF,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC5C,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAA;IACpC,CAAC;AACH,CAAC"}

package/out/src/storage/remoting/entityValidationHelpers.d.ts

@@ -0,0 +1,29 @@
+import { SyncChunk } from '../../sdk/WalletStorage.interfaces';
+import { EntityTimeStamp } from '../../sdk/types';
+/**
+ * Shared entity-validation helpers used by both client-side storage remoting
+ * (StorageClientBase / StorageMobile) and the server-side StorageServer.
+ *
+ * These helpers normalise records returned from remote calls or database queries:
+ *   - Coerce date strings / timestamps to `Date` objects.
+ *   - Replace `null` values with `undefined`.
+ *   - Replace `Uint8Array` / `Buffer` values with plain `number[]` arrays.
+ */
+export declare function validateDate(date: Date | string | number): Date;
+/**
+ * Force uniform behaviour across database engines.
+ * Use to process all individual records with timestamps retrieved from database.
+ */
+export declare function validateEntity<T extends EntityTimeStamp>(entity: T, dateFields?: string[]): T;
+/**
+ * Force uniform behaviour across database engines.
+ * Use to process all arrays of records with timestamps retrieved from database.
+ * @returns input `entities` array with contained values validated.
+ */
+export declare function validateEntities<T extends EntityTimeStamp>(entities: T[], dateFields?: string[]): T[];
+/**
+ * Validate all entity arrays within a `SyncChunk` received from a remote storage call.
+ * Normalises timestamps, nulls, and binary fields in-place.
+ */
+export declare function validateSyncChunkEntities(r: SyncChunk): SyncChunk;
+//# sourceMappingURL=entityValidationHelpers.d.ts.map

package/out/src/storage/remoting/entityValidationHelpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entityValidationHelpers.d.ts","sourceRoot":"","sources":["../../../../src/storage/remoting/entityValidationHelpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjD;;;;;;;;GAQG;AAEH,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAG/D;AAmBD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAuB7F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAMrG;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,CAejE"}