@undefineds.co/xpod 0.3.52 → 0.3.54

package/dist/edge/reachability/ReachabilitySessionService.jsonld

@@ -0,0 +1,196 @@
+{
+  "@context": [
+    "https://linkedsoftwaredependencies.org/bundles/npm/@undefineds.co/xpod/^0.0.0/components/context.jsonld"
+  ],
+  "@id": "npmd:@undefineds.co/xpod",
+  "components": [
+    {
+      "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService",
+      "@type": "Class",
+      "requireElement": "ReachabilitySessionService",
+      "parameters": [
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService_options",
+          "range": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions"
+        }
+      ],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_options",
+          "memberFieldName": "options"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_now",
+          "memberFieldName": "now"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_randomId",
+          "memberFieldName": "randomId"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_defaultP2PTtlSeconds",
+          "memberFieldName": "defaultP2PTtlSeconds"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_defaultRelayTtlSeconds",
+          "memberFieldName": "defaultRelayTtlSeconds"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_defaultRelayBandwidthLimitBytes",
+          "memberFieldName": "defaultRelayBandwidthLimitBytes"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_maxActiveP2PSessionsPerNode",
+          "memberFieldName": "maxActiveP2PSessionsPerNode"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_maxP2PCandidatesPerUpdate",
+          "memberFieldName": "maxP2PCandidatesPerUpdate"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_maxP2PCandidatesPerSession",
+          "memberFieldName": "maxP2PCandidatesPerSession"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_constructor",
+          "memberFieldName": "constructor"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_createP2PSession",
+          "memberFieldName": "createP2PSession"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_getP2PSession",
+          "memberFieldName": "getP2PSession"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_listP2PSessions",
+          "memberFieldName": "listP2PSessions"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_addP2PCandidates",
+          "memberFieldName": "addP2PCandidates"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_createRelaySession",
+          "memberFieldName": "createRelaySession"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_loadNodeRouteSource",
+          "memberFieldName": "loadNodeRouteSource"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_readActiveP2PSessions",
+          "memberFieldName": "readActiveP2PSessions"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_p2pSessionLimits",
+          "memberFieldName": "p2pSessionLimits"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_resolveP2PSessionLimits",
+          "memberFieldName": "resolveP2PSessionLimits"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_appendSession",
+          "memberFieldName": "appendSession"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_loadP2PSession",
+          "memberFieldName": "loadP2PSession"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_assertP2PSessionActive",
+          "memberFieldName": "assertP2PSessionActive"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_isP2PSessionActive",
+          "memberFieldName": "isP2PSessionActive"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService__member_normalizeP2PCandidates",
+          "memberFieldName": "normalizeP2PCandidates"
+        }
+      ],
+      "constructorArguments": [
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionService_options"
+        }
+      ]
+    },
+    {
+      "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#P2PActiveSessionLimitExceededError",
+      "@type": "Class",
+      "requireElement": "P2PActiveSessionLimitExceededError",
+      "parameters": [],
+      "constructorArguments": []
+    },
+    {
+      "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#P2PCandidateUpdateLimitExceededError",
+      "@type": "Class",
+      "requireElement": "P2PCandidateUpdateLimitExceededError",
+      "parameters": [],
+      "constructorArguments": []
+    },
+    {
+      "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#P2PCandidateSessionLimitExceededError",
+      "@type": "Class",
+      "requireElement": "P2PCandidateSessionLimitExceededError",
+      "parameters": [],
+      "constructorArguments": []
+    },
+    {
+      "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions",
+      "@type": "AbstractClass",
+      "requireElement": "ReachabilitySessionServiceOptions",
+      "parameters": [],
+      "memberFields": [
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions__member_repository",
+          "memberFieldName": "repository"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions__member_baseStorageDomain",
+          "memberFieldName": "baseStorageDomain"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions__member_apiBaseUrl",
+          "memberFieldName": "apiBaseUrl"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions__member_now",
+          "memberFieldName": "now"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions__member_randomId",
+          "memberFieldName": "randomId"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions__member_defaultP2PTtlSeconds",
+          "memberFieldName": "defaultP2PTtlSeconds"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions__member_defaultRelayTtlSeconds",
+          "memberFieldName": "defaultRelayTtlSeconds"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions__member_defaultRelayBandwidthLimitBytes",
+          "memberFieldName": "defaultRelayBandwidthLimitBytes"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions__member_maxActiveP2PSessionsPerNode",
+          "memberFieldName": "maxActiveP2PSessionsPerNode"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions__member_maxP2PCandidatesPerUpdate",
+          "memberFieldName": "maxP2PCandidatesPerUpdate"
+        },
+        {
+          "@id": "undefineds:dist/edge/reachability/ReachabilitySessionService.jsonld#ReachabilitySessionServiceOptions__member_maxP2PCandidatesPerSession",
+          "memberFieldName": "maxP2PCandidatesPerSession"
+        }
+      ],
+      "constructorArguments": []
+    }
+  ]
+}

package/dist/edge/reachability/RouteSetBuilder.d.ts

@@ -0,0 +1,2 @@
+import type { BuildRouteSetOptions, BuildRouteSetSource, RouteSet } from './types';
+export declare function buildRouteSet(source: BuildRouteSetSource, options?: BuildRouteSetOptions): RouteSet;

package/dist/edge/reachability/RouteSetBuilder.js

@@ -0,0 +1,205 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildRouteSet = buildRouteSet;
+const DEFAULT_PRIORITY = {
+    loopback: 10,
+    lan: 20,
+    'public-direct': 30,
+    p2p: 40,
+    'user-tunnel': 50,
+    'xpod-relay': 90,
+};
+const PUBLIC_KINDS = new Set(['public-direct', 'user-tunnel', 'xpod-relay']);
+function buildRouteSet(source, options = {}) {
+    const audience = options.audience ?? 'managed';
+    const now = options.now ?? new Date();
+    const metadata = source.metadata ?? {};
+    const canonicalUrl = normalizeCanonicalUrl(source.canonicalUrl
+        ?? getString(metadata.canonicalUrl)
+        ?? getString(metadata.baseUrl)
+        ?? source.publicUrl
+        ?? deriveManagedDomainUrl(source.subdomain, options.baseStorageDomain ?? source.baseStorageDomain));
+    const routes = uniqueRoutes([
+        ...routesFromMetadata(source, canonicalUrl, metadata),
+        ...routesFromDirectCandidates(source, canonicalUrl, metadata),
+        ...routesFromTunnel(source, canonicalUrl, metadata),
+        ...routesFromConnectivity(source, canonicalUrl),
+    ])
+        .filter((route) => isVisibleToAudience(route, audience))
+        .sort((left, right) => left.priority - right.priority || left.id.localeCompare(right.id));
+    return {
+        nodeId: source.nodeId,
+        canonicalUrl,
+        generatedAt: now.toISOString(),
+        routes,
+    };
+}
+function routesFromMetadata(source, canonicalUrl, metadata) {
+    const rawRoutes = Array.isArray(metadata.routes) ? metadata.routes : [];
+    return rawRoutes
+        .map((value, index) => normalizeAccessRoute(source.nodeId, canonicalUrl, value, `metadata-${index}`))
+        .filter((route) => Boolean(route));
+}
+function routesFromDirectCandidates(source, canonicalUrl, metadata) {
+    const candidates = [
+        ...normalizeStringArray(source.metadata?.directCandidates),
+        ...normalizeStringArray(metadata.directCandidates),
+    ];
+    return candidates
+        .map((targetUrl, index) => normalizeAccessRoute(source.nodeId, canonicalUrl, {
+        id: `public-direct-${index}`,
+        kind: 'public-direct',
+        targetUrl,
+        priority: DEFAULT_PRIORITY['public-direct'],
+        requiresManagedClient: false,
+        visibility: 'public',
+        health: source.connectivityStatus === 'unreachable' ? 'unreachable' : 'healthy',
+    }, `public-direct-${index}`))
+        .filter((route) => Boolean(route));
+}
+function routesFromTunnel(source, canonicalUrl, metadata) {
+    const tunnel = isRecord(metadata.tunnel) ? metadata.tunnel : undefined;
+    const entrypoint = getString(tunnel?.entrypoint) ?? getString(tunnel?.endpoint) ?? getString(tunnel?.url);
+    const status = getString(tunnel?.status);
+    if (!entrypoint || status === 'inactive' || status === 'standby') {
+        return [];
+    }
+    const route = normalizeAccessRoute(source.nodeId, canonicalUrl, {
+        id: 'user-tunnel',
+        kind: 'user-tunnel',
+        targetUrl: entrypoint,
+        priority: DEFAULT_PRIORITY['user-tunnel'],
+        requiresManagedClient: false,
+        visibility: 'public',
+        health: status === 'error' ? 'degraded' : 'healthy',
+        metadata: { tunnel },
+    }, 'user-tunnel');
+    return route ? [route] : [];
+}
+function routesFromConnectivity(source, canonicalUrl) {
+    if (!source.publicUrl || source.connectivityStatus === 'unreachable') {
+        return [];
+    }
+    const route = normalizeAccessRoute(source.nodeId, canonicalUrl, {
+        id: 'public-direct',
+        kind: 'public-direct',
+        targetUrl: source.publicUrl,
+        priority: DEFAULT_PRIORITY['public-direct'],
+        requiresManagedClient: false,
+        visibility: 'public',
+        health: source.connectivityStatus === 'reachable' ? 'healthy' : 'unknown',
+    }, 'public-direct');
+    return route ? [route] : [];
+}
+function normalizeAccessRoute(nodeId, canonicalUrl, value, fallbackId) {
+    if (!isRecord(value)) {
+        return undefined;
+    }
+    const kind = normalizeKind(value.kind);
+    const targetUrl = normalizeUrlString(getString(value.targetUrl));
+    if (!kind || !targetUrl) {
+        return undefined;
+    }
+    const visibility = normalizeVisibility(value.visibility) ?? defaultVisibility(kind);
+    const requiresManagedClient = typeof value.requiresManagedClient === 'boolean'
+        ? value.requiresManagedClient
+        : visibility !== 'public';
+    return {
+        id: getString(value.id) ?? fallbackId,
+        nodeId: getString(value.nodeId) ?? nodeId,
+        canonicalUrl: normalizeCanonicalUrl(getString(value.canonicalUrl) ?? canonicalUrl),
+        kind,
+        targetUrl,
+        priority: normalizePriority(value.priority) ?? DEFAULT_PRIORITY[kind],
+        requiresManagedClient,
+        visibility,
+        health: normalizeHealth(value.health) ?? 'unknown',
+        lastCheckedAt: getString(value.lastCheckedAt),
+        expiresAt: getString(value.expiresAt),
+        metadata: isRecord(value.metadata) ? value.metadata : undefined,
+    };
+}
+function normalizeCanonicalUrl(value) {
+    const normalized = normalizeUrlString(value);
+    if (normalized) {
+        return normalized;
+    }
+    return 'about:blank';
+}
+function normalizeUrlString(value) {
+    if (!value) {
+        return undefined;
+    }
+    try {
+        return new URL(value).toString();
+    }
+    catch {
+        return undefined;
+    }
+}
+function normalizeKind(value) {
+    const kind = getString(value);
+    return kind && kind in DEFAULT_PRIORITY ? kind : undefined;
+}
+function normalizeVisibility(value) {
+    const visibility = getString(value);
+    if (visibility === 'local-only' || visibility === 'same-account' || visibility === 'authorized-client' || visibility === 'public') {
+        return visibility;
+    }
+    return undefined;
+}
+function normalizeHealth(value) {
+    const health = getString(value);
+    if (health === 'unknown' || health === 'healthy' || health === 'degraded' || health === 'unreachable') {
+        return health;
+    }
+    return undefined;
+}
+function normalizePriority(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        return undefined;
+    }
+    return value;
+}
+function defaultVisibility(kind) {
+    return PUBLIC_KINDS.has(kind) ? 'public' : 'authorized-client';
+}
+function isVisibleToAudience(route, audience) {
+    if (audience === 'managed') {
+        return true;
+    }
+    return route.visibility === 'public' && !route.requiresManagedClient && PUBLIC_KINDS.has(route.kind);
+}
+function uniqueRoutes(routes) {
+    const byKey = new Map();
+    for (const route of routes) {
+        const key = `${route.kind}\n${route.targetUrl}`;
+        const previous = byKey.get(key);
+        if (!previous || route.priority < previous.priority) {
+            byKey.set(key, route);
+        }
+    }
+    return [...byKey.values()];
+}
+function normalizeStringArray(value) {
+    if (Array.isArray(value)) {
+        return value.filter((entry) => typeof entry === 'string' && entry.trim().length > 0);
+    }
+    if (typeof value === 'string' && value.trim().length > 0) {
+        return [value.trim()];
+    }
+    return [];
+}
+function deriveManagedDomainUrl(subdomain, baseStorageDomain) {
+    if (!subdomain || !baseStorageDomain) {
+        return undefined;
+    }
+    return `https://${subdomain}.${baseStorageDomain}/`;
+}
+function getString(value) {
+    return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;
+}
+function isRecord(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+//# sourceMappingURL=RouteSetBuilder.js.map

package/dist/edge/reachability/RouteSetBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RouteSetBuilder.js","sourceRoot":"","sources":["../../../src/edge/reachability/RouteSetBuilder.ts"],"names":[],"mappings":";;AAsBA,sCA2BC;AAtCD,MAAM,gBAAgB,GAAoC;IACxD,QAAQ,EAAE,EAAE;IACZ,GAAG,EAAE,EAAE;IACP,eAAe,EAAE,EAAE;IACnB,GAAG,EAAE,EAAE;IACP,aAAa,EAAE,EAAE;IACjB,YAAY,EAAE,EAAE;CACjB,CAAC;AAEF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAkB,CAAC,eAAe,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;AAE9F,SAAgB,aAAa,CAAC,MAA2B,EAAE,UAAgC,EAAE;IAC3F,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;IACvC,MAAM,YAAY,GAAG,qBAAqB,CACxC,MAAM,CAAC,YAAY;WACd,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;WAChC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;WAC3B,MAAM,CAAC,SAAS;WAChB,sBAAsB,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,iBAAiB,CAAC,CACrG,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,GAAG,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC;QACrD,GAAG,0BAA0B,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC;QAC7D,GAAG,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC;QACnD,GAAG,sBAAsB,CAAC,MAAM,EAAE,YAAY,CAAC;KAChD,CAAC;SACC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;SACvD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5F,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY;QACZ,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA2B,EAAE,YAAoB,EAAE,QAAiC;IAC9G,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,SAAS;SACb,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,KAAK,EAAE,CAAC,CAAC;SACpG,MAAM,CAAC,CAAC,KAAK,EAAwB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,0BAA0B,CAAC,MAA2B,EAAE,YAAoB,EAAE,QAAiC;IACtH,MAAM,UAAU,GAAG;QACjB,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;QAC1D,GAAG,oBAAoB,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KACnD,CAAC;IACF,OAAO,UAAU;SACd,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE;QAC3E,EAAE,EAAE,iBAAiB,KAAK,EAAE;QAC5B,IAAI,EAAE,eAAe;QACrB,SAAS;QACT,QAAQ,EAAE,gBAAgB,CAAC,eAAe,CAAC;QAC3C,qBAAqB,EAAE,KAAK;QAC5B,UAAU,EAAE,QAAQ;QACpB,MAAM,EAAE,MAAM,CAAC,kBAAkB,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;KAChF,EAAE,iBAAiB,KAAK,EAAE,CAAC,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAwB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA2B,EAAE,YAAoB,EAAE,QAAiC;IAC5G,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACjE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE;QAC9D,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,gBAAgB,CAAC,aAAa,CAAC;QACzC,qBAAqB,EAAE,KAAK;QAC5B,UAAU,EAAE,QAAQ;QACpB,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACnD,QAAQ,EAAE,EAAE,MAAM,EAAE;KACrB,EAAE,aAAa,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,sBAAsB,CAAC,MAA2B,EAAE,YAAoB;IAC/E,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,kBAAkB,KAAK,aAAa,EAAE,CAAC;QACrE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE;QAC9D,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,gBAAgB,CAAC,eAAe,CAAC;QAC3C,qBAAqB,EAAE,KAAK;QAC5B,UAAU,EAAE,QAAQ;QACpB,MAAM,EAAE,MAAM,CAAC,kBAAkB,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KAC1E,EAAE,eAAe,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAc,EACd,YAAoB,EACpB,KAAc,EACd,UAAkB;IAElB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACpF,MAAM,qBAAqB,GAAG,OAAO,KAAK,CAAC,qBAAqB,KAAK,SAAS;QAC5E,CAAC,CAAC,KAAK,CAAC,qBAAqB;QAC7B,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC;IAC5B,OAAO;QACL,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,UAAU;QACrC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM;QACzC,YAAY,EAAE,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC;QAClF,IAAI;QACJ,SAAS;QACT,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC;QACrE,qBAAqB;QACrB,UAAU;QACV,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,SAAS;QAClD,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC;QAC7C,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;QACrC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAgC,CAAC;IAC7D,OAAO,IAAI,IAAI,IAAI,IAAI,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAsC,CAAC;IACzE,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,KAAK,cAAc,IAAI,UAAU,KAAK,mBAAmB,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClI,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAkC,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QACtG,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAqB;IAC9C,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACjE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAkB,EAAE,QAAuB;IACtE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,qBAAqB,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACvG,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAkB,EAAE,iBAA0B;IAC5E,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,WAAW,SAAS,IAAI,iBAAiB,GAAG,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC","sourcesContent":["import type {\n  AccessRoute,\n  AccessRouteHealth,\n  AccessRouteKind,\n  AccessRouteVisibility,\n  BuildRouteSetOptions,\n  BuildRouteSetSource,\n  RouteAudience,\n  RouteSet,\n} from './types';\n\nconst DEFAULT_PRIORITY: Record<AccessRouteKind, number> = {\n  loopback: 10,\n  lan: 20,\n  'public-direct': 30,\n  p2p: 40,\n  'user-tunnel': 50,\n  'xpod-relay': 90,\n};\n\nconst PUBLIC_KINDS = new Set<AccessRouteKind>(['public-direct', 'user-tunnel', 'xpod-relay']);\n\nexport function buildRouteSet(source: BuildRouteSetSource, options: BuildRouteSetOptions = {}): RouteSet {\n  const audience = options.audience ?? 'managed';\n  const now = options.now ?? new Date();\n  const metadata = source.metadata ?? {};\n  const canonicalUrl = normalizeCanonicalUrl(\n    source.canonicalUrl\n      ?? getString(metadata.canonicalUrl)\n      ?? getString(metadata.baseUrl)\n      ?? source.publicUrl\n      ?? deriveManagedDomainUrl(source.subdomain, options.baseStorageDomain ?? source.baseStorageDomain),\n  );\n\n  const routes = uniqueRoutes([\n    ...routesFromMetadata(source, canonicalUrl, metadata),\n    ...routesFromDirectCandidates(source, canonicalUrl, metadata),\n    ...routesFromTunnel(source, canonicalUrl, metadata),\n    ...routesFromConnectivity(source, canonicalUrl),\n  ])\n    .filter((route) => isVisibleToAudience(route, audience))\n    .sort((left, right) => left.priority - right.priority || left.id.localeCompare(right.id));\n\n  return {\n    nodeId: source.nodeId,\n    canonicalUrl,\n    generatedAt: now.toISOString(),\n    routes,\n  };\n}\n\nfunction routesFromMetadata(source: BuildRouteSetSource, canonicalUrl: string, metadata: Record<string, unknown>): AccessRoute[] {\n  const rawRoutes = Array.isArray(metadata.routes) ? metadata.routes : [];\n  return rawRoutes\n    .map((value, index) => normalizeAccessRoute(source.nodeId, canonicalUrl, value, `metadata-${index}`))\n    .filter((route): route is AccessRoute => Boolean(route));\n}\n\nfunction routesFromDirectCandidates(source: BuildRouteSetSource, canonicalUrl: string, metadata: Record<string, unknown>): AccessRoute[] {\n  const candidates = [\n    ...normalizeStringArray(source.metadata?.directCandidates),\n    ...normalizeStringArray(metadata.directCandidates),\n  ];\n  return candidates\n    .map((targetUrl, index) => normalizeAccessRoute(source.nodeId, canonicalUrl, {\n      id: `public-direct-${index}`,\n      kind: 'public-direct',\n      targetUrl,\n      priority: DEFAULT_PRIORITY['public-direct'],\n      requiresManagedClient: false,\n      visibility: 'public',\n      health: source.connectivityStatus === 'unreachable' ? 'unreachable' : 'healthy',\n    }, `public-direct-${index}`))\n    .filter((route): route is AccessRoute => Boolean(route));\n}\n\nfunction routesFromTunnel(source: BuildRouteSetSource, canonicalUrl: string, metadata: Record<string, unknown>): AccessRoute[] {\n  const tunnel = isRecord(metadata.tunnel) ? metadata.tunnel : undefined;\n  const entrypoint = getString(tunnel?.entrypoint) ?? getString(tunnel?.endpoint) ?? getString(tunnel?.url);\n  const status = getString(tunnel?.status);\n  if (!entrypoint || status === 'inactive' || status === 'standby') {\n    return [];\n  }\n  const route = normalizeAccessRoute(source.nodeId, canonicalUrl, {\n    id: 'user-tunnel',\n    kind: 'user-tunnel',\n    targetUrl: entrypoint,\n    priority: DEFAULT_PRIORITY['user-tunnel'],\n    requiresManagedClient: false,\n    visibility: 'public',\n    health: status === 'error' ? 'degraded' : 'healthy',\n    metadata: { tunnel },\n  }, 'user-tunnel');\n  return route ? [route] : [];\n}\n\nfunction routesFromConnectivity(source: BuildRouteSetSource, canonicalUrl: string): AccessRoute[] {\n  if (!source.publicUrl || source.connectivityStatus === 'unreachable') {\n    return [];\n  }\n  const route = normalizeAccessRoute(source.nodeId, canonicalUrl, {\n    id: 'public-direct',\n    kind: 'public-direct',\n    targetUrl: source.publicUrl,\n    priority: DEFAULT_PRIORITY['public-direct'],\n    requiresManagedClient: false,\n    visibility: 'public',\n    health: source.connectivityStatus === 'reachable' ? 'healthy' : 'unknown',\n  }, 'public-direct');\n  return route ? [route] : [];\n}\n\nfunction normalizeAccessRoute(\n  nodeId: string,\n  canonicalUrl: string,\n  value: unknown,\n  fallbackId: string,\n): AccessRoute | undefined {\n  if (!isRecord(value)) {\n    return undefined;\n  }\n  const kind = normalizeKind(value.kind);\n  const targetUrl = normalizeUrlString(getString(value.targetUrl));\n  if (!kind || !targetUrl) {\n    return undefined;\n  }\n  const visibility = normalizeVisibility(value.visibility) ?? defaultVisibility(kind);\n  const requiresManagedClient = typeof value.requiresManagedClient === 'boolean'\n    ? value.requiresManagedClient\n    : visibility !== 'public';\n  return {\n    id: getString(value.id) ?? fallbackId,\n    nodeId: getString(value.nodeId) ?? nodeId,\n    canonicalUrl: normalizeCanonicalUrl(getString(value.canonicalUrl) ?? canonicalUrl),\n    kind,\n    targetUrl,\n    priority: normalizePriority(value.priority) ?? DEFAULT_PRIORITY[kind],\n    requiresManagedClient,\n    visibility,\n    health: normalizeHealth(value.health) ?? 'unknown',\n    lastCheckedAt: getString(value.lastCheckedAt),\n    expiresAt: getString(value.expiresAt),\n    metadata: isRecord(value.metadata) ? value.metadata : undefined,\n  };\n}\n\nfunction normalizeCanonicalUrl(value?: string): string {\n  const normalized = normalizeUrlString(value);\n  if (normalized) {\n    return normalized;\n  }\n  return 'about:blank';\n}\n\nfunction normalizeUrlString(value?: string): string | undefined {\n  if (!value) {\n    return undefined;\n  }\n  try {\n    return new URL(value).toString();\n  } catch {\n    return undefined;\n  }\n}\n\nfunction normalizeKind(value: unknown): AccessRouteKind | undefined {\n  const kind = getString(value) as AccessRouteKind | undefined;\n  return kind && kind in DEFAULT_PRIORITY ? kind : undefined;\n}\n\nfunction normalizeVisibility(value: unknown): AccessRouteVisibility | undefined {\n  const visibility = getString(value) as AccessRouteVisibility | undefined;\n  if (visibility === 'local-only' || visibility === 'same-account' || visibility === 'authorized-client' || visibility === 'public') {\n    return visibility;\n  }\n  return undefined;\n}\n\nfunction normalizeHealth(value: unknown): AccessRouteHealth | undefined {\n  const health = getString(value) as AccessRouteHealth | undefined;\n  if (health === 'unknown' || health === 'healthy' || health === 'degraded' || health === 'unreachable') {\n    return health;\n  }\n  return undefined;\n}\n\nfunction normalizePriority(value: unknown): number | undefined {\n  if (typeof value !== 'number' || !Number.isFinite(value)) {\n    return undefined;\n  }\n  return value;\n}\n\nfunction defaultVisibility(kind: AccessRouteKind): AccessRouteVisibility {\n  return PUBLIC_KINDS.has(kind) ? 'public' : 'authorized-client';\n}\n\nfunction isVisibleToAudience(route: AccessRoute, audience: RouteAudience): boolean {\n  if (audience === 'managed') {\n    return true;\n  }\n  return route.visibility === 'public' && !route.requiresManagedClient && PUBLIC_KINDS.has(route.kind);\n}\n\nfunction uniqueRoutes(routes: AccessRoute[]): AccessRoute[] {\n  const byKey = new Map<string, AccessRoute>();\n  for (const route of routes) {\n    const key = `${route.kind}\\n${route.targetUrl}`;\n    const previous = byKey.get(key);\n    if (!previous || route.priority < previous.priority) {\n      byKey.set(key, route);\n    }\n  }\n  return [...byKey.values()];\n}\n\nfunction normalizeStringArray(value: unknown): string[] {\n  if (Array.isArray(value)) {\n    return value.filter((entry): entry is string => typeof entry === 'string' && entry.trim().length > 0);\n  }\n  if (typeof value === 'string' && value.trim().length > 0) {\n    return [value.trim()];\n  }\n  return [];\n}\n\nfunction deriveManagedDomainUrl(subdomain?: string, baseStorageDomain?: string): string | undefined {\n  if (!subdomain || !baseStorageDomain) {\n    return undefined;\n  }\n  return `https://${subdomain}.${baseStorageDomain}/`;\n}\n\nfunction getString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === 'object' && !Array.isArray(value);\n}\n"]}

package/dist/edge/reachability/TcpP2PDataPlaneTransport.d.ts

@@ -0,0 +1,47 @@
+import { type AddressInfo, type Socket } from 'node:net';
+import type { P2PDataPlaneHandler, P2PDataPlaneTransport } from './P2PDataPlane';
+export interface TcpP2PDataPlaneTransportOptions {
+    remoteHost: string;
+    remotePort: number;
+    socket?: Socket;
+    timeoutMs?: number;
+    randomId?: () => string;
+}
+export interface TcpP2PDataPlaneTransport extends P2PDataPlaneTransport {
+    close(): void;
+}
+export interface TcpP2PDataPlaneServerOptions {
+    handler: P2PDataPlaneHandler;
+    host?: string;
+}
+export interface TcpP2PDataPlaneServer {
+    listen(port?: number): Promise<void>;
+    address(): AddressInfo;
+    close(): Promise<void>;
+}
+export interface TcpP2PDataPlaneSocketOptions {
+    socket: Socket;
+    handler: P2PDataPlaneHandler;
+}
+export interface TcpP2PDataPlaneSocketHandle {
+    close(): void;
+}
+export interface TcpHolePunchPlanOptions {
+    nowSeconds?: number;
+    windowSeconds?: number;
+    maxClockErrorSeconds?: number;
+    minRunWindowSeconds?: number;
+    numPorts?: number;
+    basePort?: number;
+    portRange?: number;
+}
+export interface TcpHolePunchPlan {
+    bucket: number;
+    boundary: number;
+    rendezvousTimeSeconds: number;
+    ports: number[];
+}
+export declare function createTcpP2PDataPlaneTransport(options: TcpP2PDataPlaneTransportOptions): TcpP2PDataPlaneTransport;
+export declare function createTcpP2PDataPlaneServer(options: TcpP2PDataPlaneServerOptions): TcpP2PDataPlaneServer;
+export declare function attachTcpP2PDataPlaneSocket(options: TcpP2PDataPlaneSocketOptions): TcpP2PDataPlaneSocketHandle;
+export declare function computeTcpHolePunchPlan(options?: TcpHolePunchPlanOptions): TcpHolePunchPlan;